added AGO status to order response

Add productId in issuedvoucher response (nb: its not added in purchasedproducts response as this was not implemented and not needed)
Make voucherStatus response model consistent across array + object; add time offset everywhere
2026-09-09 10:55:14 +02:00 · 2026-09-09 09:33:11 +02:00 · 2026-08-31 12:57:13 +02:00 · 2026-08-27 16:15:29 +02:00 · 2026-08-24 11:54:47 +02:00 · 2026-08-21 13:08:50 +02:00
21 changed files with 6214 additions and 1102 deletions
--- a/src/AGO_Examples_20260904.curl
+++ b/src/AGO_Examples_20260904.curl
--- a/src/java/ABTProductsPUTGenerator/bin/ABTProductsPUTGenerator.jar
+++ b/src/java/ABTProductsPUTGenerator/bin/ABTProductsPUTGenerator.jar
--- a/src/java/ABTProductsPUTGenerator/src/main/java/nl/htm/ovpay/abt/ABTProductsPUTGenerator.java
+++ b/src/java/ABTProductsPUTGenerator/src/main/java/nl/htm/ovpay/abt/ABTProductsPUTGenerator.java
@ -215,9 +215,14 @@ public class ABTProductsPUTGenerator {
            }
            case "paymentMoment" -> {
                LOGGER.info("Rewriting paymentMoment to paymentMomentId...");
+                if (jsonField.getValue().get("paymentMomentId").isNull()) {
+                    LOGGER.info("Rewriting null paymentMomentId...");
+                    ((ObjectNode)newJsonNode).putRawValue("paymentMomentId", null);
+                } else {
                    Long paymentMomentId = jsonField.getValue().get("paymentMomentId").asLong();
                    ((ObjectNode)newJsonNode).put("paymentMomentId", paymentMomentId);
                }
+            }
            case "requiredCustomerLevel" -> {
                LOGGER.info("Rewriting requiredCustomerLevel to requiredCustomerLevelId...");
                Long requiredCustomerLevelId = jsonField.getValue().get("requiredCustomerLevelId").asLong();
--- a/src/openapi/container/abt-container-notifications.yaml
+++ b/src/openapi/container/abt-container-notifications.yaml
--- a/src/openapi/container/abt-container-tokens.yaml
+++ b/src/openapi/container/abt-container-tokens.yaml
@ -0,0 +1,417 @@
+openapi: 3.0.3
+info:
+  title: Integration layer APIs for token storage for ABT
+  description: >-
+    APIs that give business processes access to the security and authorization state of a token within the scope of HTM. In the backend this is connected to a container which handles the accessToken en refreshToken management for an OVpas as given by GBO.
+  version: "1.0"
+servers:
+  - url: https://services.acc.api.htm.nl/abt/containertokens/1.0
+security:
+  - oAuthSample: [profile]
+tags:
+  - name: securitytokens
+paths:
+  /securitytokens:
+    post:
+      tags:
+        - securitytokens
+      summary: Create a new security token entry in the vault
+      description: Create a new security token entry in the vault, if the customerProfileId has been supplied create in the customerToken DB otherwise in the AnonymousToken DB
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/CreateSecurityTokenBody"
+            examples:
+              token details:
+                value:
+                  {
+                    "xTat": "cf694905-7f76-4799-b0bc-490716921323",
+                    "otpKey": "123456789123456789123456789abcde",
+                    "customerProfileId": 12314
+                  }
+      responses:
+        "201":
+          description: Created               
+        "400":
+          description: Bad Request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Missing Parameters:
+                  value:
+                    status: 400
+                    title: Missing Mandatory Parameter
+                    detail: Required parameter {0} is missing.
+                Invalid Parameters:
+                  value:
+                    status: 400
+                    title: Invalid Parameter
+                    detail: Required parameter {0} is invalid.
+        "401":
+          description: Unauthorized
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Unauthorized:
+                  value:
+                    status: 401
+                    title: Unauthorized
+                    detail: Invalid Access Token
+        "404":
+          description: Not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                TAT not found:
+                  value:
+                    status: 404
+                    title: Not Found
+                    detail: TAT Account Not Found
+        "409":
+          description: Conflict
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                TAT already exists:
+                  value:
+                    status: 409
+                    title: Conflict
+                    detail: Security Token already exists
+        "500":
+          description: Internal server error
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Internal Server Error:
+                  value:
+                    status: 500
+                    title: Internal Server Error
+                    detail: An unknown error has occurred
+  /securitytokens/{xTat}/status:
+    parameters: 
+    - name: xTat
+      in: path
+      schema:
+        type: string
+        example: 85dbeacc-b9aa-4d5b-bdec-9319010c597f
+      required: true
+      description: The xTat of the OVpastoken for which the status needs to be checked
+    - name: customerProfileId
+      in: query
+      schema:
+        type: integer
+        example: 323
+      required: false
+      description: The id of the customer Profile for which the request is being done, if customer has identified themselves
+    get:
+      tags:
+        - securitytokens
+      summary: Request the security and authorization status of an OV pas token
+      description: Request the security and authorization status of an OV pas token, if the customerProfileId has been supplied look in the customerToken DB otherwise check the AnonymousToken DB.
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+               $ref: "#/components/schemas/SecurityTokenStatusResponse"
+              examples:
+                Not secured and not authorized :
+                  summary: Not secured, not authorized
+                  value:
+                    {
+                      "isAuthorized": false,
+                      "isSecured": false
+                    }
+                Secured and not authorized :
+                  summary: Secured, not authorized
+                  value:
+                    {
+                      "isAuthorized": false,
+                      "isSecured": true
+                    }
+                Secured and authorized :
+                  summary: Secured and authorized
+                  value:
+                    {
+                      "isAuthorized": true,
+                      "isSecured": true
+                    }
+        "400":
+          description: Bad Request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Missing Parameters:
+                  value:
+                    status: 400
+                    title: Missing Mandatory Parameter
+                    detail: Required parameter {0} is missing.
+                Invalid Parameters:
+                  value:
+                    status: 400
+                    title: Invalid Parameter
+                    detail: Required parameter {0} is invalid.
+        "401":
+          description: Unauthorized
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Unauthorized:
+                  value:
+                    status: 401
+                    title: Unauthorized
+                    detail: Invalid Access Token
+        "404":
+          description: Not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                TAT not found:
+                  value:
+                    status: 404
+                    title: Not Found
+                    detail: TAT Account Not Found                    
+        "500":
+          description: Internal server error
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Internal Server Error:
+                  value:
+                    status: 500
+                    title: Internal Server Error
+                    detail: An unknown error has occurred
+  /securitytokens/{xTat}:
+    parameters: 
+    - name: xTat
+      in: path
+      schema:
+        type: string
+        example: uuid
+      required: true
+      description: The xTat of the ovPastoken for which the status needs to be checked
+    - name: customerProfileId
+      in: query
+      schema:
+        type: integer
+        example: 323
+      required: false
+      description: The id of the customer Profile for which the request is being done, if customer has identified themselves
+    patch:
+      tags:
+        - securitytokens
+      summary: Validate the supplied OTP and secure and/or authorize the token
+      description: Validate the supplied OTP and secure and/or authorize the token if the customerProfileId has been supplied look in the customerToken DB otherwise check the AnonymousToken DB.
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/SecurityValidateTokenBody"
+            examples:
+              token:
+                value:
+                  {
+                    "otp": "123456"
+                  }
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+               $ref: "#/components/schemas/SecurityTokenStatusResponse"
+              examples:
+                Not secured and not authorized :
+                  summary: Not secured, not authorized
+                  value:
+                    {
+                      "isAuthorized": false,
+                      "isSecured": false
+                    }
+                Secured and not authorized :
+                  summary: Secured, not authorized
+                  value:
+                    {
+                      "isAuthorized": false,
+                      "isSecured": true
+                    }
+                Secured and authorized :
+                  summary: Secured and authorized
+                  value:
+                    {
+                      "isAuthorized": true,
+                      "isSecured": true
+                    }
+        "400":
+          description: Bad Request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Missing Parameters:
+                  value:
+                    status: 400
+                    title: Missing Mandatory Parameter
+                    detail: Required parameter {0} is missing.
+                Invalid Parameters:
+                  value:
+                    status: 400
+                    title: Invalid Parameter
+                    detail: Required parameter {0} is invalid. 
+        "422":
+          description: Unprocessable Entity
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"  
+              examples:             
+                Validation failed:
+                  value:
+                    status: 422
+                    title: OTP validation failed
+                    detail: The supplied OTP could not be validated
+        "401":
+          description: Unauthorized
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Unauthorized:
+                  value:
+                    status: 401
+                    title: Unauthorized
+                    detail: Invalid Access Token
+        "404":
+          description: Not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                TAT not found:
+                  value:
+                    status: 404
+                    title: Not Found
+                    detail: TAT Account Not Found
+        "500":
+          description: Internal server error
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Internal Server Error:
+                  value:
+                    status: 500
+                    title: Internal Server Error
+                    detail: An unknown error has occurred
+    delete:
+      tags:
+        - securitytokens
+      summary: Delete the authorization for HTM for an ovpaytoken
+      description: Delete the authorization for HTM for an ovpaytoken if the customerProfileId has been supplied look in the customerToken DB otherwise check the AnonymousToken DB.
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+               $ref: "#/components/schemas/SecurityTokenStatusResponse"
+              example:
+                {}
+components:
+  securitySchemes:
+    oAuthSample:  
+      type: oauth2
+      description: This API uses OAuth 2 with the clientCredentials flow. [More info](https://api.example.com/docs/auth)
+      flows:
+        clientCredentials:   # <---- OAuth flow( clientCredentials)
+          tokenUrl: https://identity.{env}.api.htm.nl/oauth2/token
+          scopes:
+            profile: "Access user profile"
+  schemas:
+    ErrorResponse:
+      description: Default response when an invalid request has been sent
+      type: object
+      properties:
+        status:
+          type: integer
+          description: >-
+            A status IS An integer that represents the HTTP status code of the
+            response.
+          example: 400
+        title:
+          type: string
+          description: A title IS A string that provides a brief summary of the error.
+        detail:
+          type: string
+          description: A detail IS A string that provides more details about the error.
+    CreateSecurityTokenBody:
+      description: Body for when the a new security token entry is created
+      type: object
+      required:
+        - xTat
+        - otpKey
+      properties:
+        xTat:
+          type : string
+          description: >- 
+            Unique identifier for the GBO transit account
+          example: 03071794-482a-4168-b60f-84669a9e6a76
+        otpKey:
+          type : string
+          description: >- 
+            Key used to validate the OTP at GBO
+          example: 123456789123456789123456789abcde
+        customerProfileId:
+          type : integer
+          description: >- 
+            CustomerProfileId of the account requesting security or giving authorization
+          example: 123456
+    SecurityTokenStatusResponse:
+      description: Response for when the status of a token is requested
+      type: object
+      properties:
+        isSecured:
+          type: boolean
+          description: >-
+            Is the OVpas secured according to the GBO
+          example: false
+        isAuthorized:
+          type: boolean
+          description: >-
+            Does HTM have the authorization to access the secured the data of the OVpas
+          example: false
+    SecurityValidateTokenBody:
+      description: Body for when the a token entry is validated
+      type: object
+      required:
+        - otp
+      properties:
+        otp:
+          type : string
+          description: >- 
+            OTP to be used to secure the token and retrieve the JWT at GBO          
+          example: 123456
--- a/src/openapi/contracts/contracts-se.yaml
+++ b/src/openapi/contracts/contracts-se.yaml
@ -45,12 +45,36 @@ paths:
                        "contractStatus":
                          { "contractStatusId": 2, "name": "active" },
                        "productId": 1,
-                        "productName": "HTM Maand 20% korting",
-                        "termDuration": "P0Y1M0D",
+                        "productName": "HTM Maand 20% korting doorlopend",
+                        "termDuration": "P1M",
                        "billingDay": 15,
                        "highestInvoiceTerm": 1,
-                        "created": "2024-08-01 15:01:00.000",
+                        "created": "2024-08-01T15:01:00.000Z",
                        "ovPayTokenId": 1337,
+                        "contractVersions": [
+                          {
+                            "contractVersionId": 1,
+                            "termsAndConditions": "https://www.htm.nl/reisproducten/productvoorwaarden/htm-maandkorting/",
+                            "productId": 1,
+                            "productName": "HTM Maand 20% korting doorlopend",
+                            "taxCode": "V9",
+                            "taxPercentage": 9,
+                            "termAmountInclTax": 400,
+                            "start": "2024-08-01T15:01:00.000Z",
+                            "end": "2025-01-01T03:00:00.000Z"
+                          },
+                          {
+                            "contractVersionId": 2,
+                            "termsAndConditions": "https://www.htm.nl/reisproducten/productvoorwaarden/htm-maandkorting/",
+                            "productId": 1,
+                            "productName": "HTM Maand 20% korting doorlopend",
+                            "taxCode": "V9",
+                            "taxPercentage": 9,
+                            "termAmountInclTax": 500,
+                            "start": "2025-01-01T03:00:00.000Z",
+                            "end": null
+                          }
+                        ],
                        "_links":
                          {
                            "get_token":
@ -68,14 +92,38 @@ paths:
                        "orderLineId": "42f68042-908f-41f4-9d9b-4cab843ff0e8",
                        "touchpointId": 2,
                        "contractStatus":
-                          { "contractStatusId": 1, "name": "new" },
+                          { "contractStatusId": 6, "name": "pending cancellation" },
                        "productId": 1,
-                        "productName": "HTM Maand 20% korting",
-                        "termDuration": "P0Y1M0D",
+                        "productName": "HTM 20% Korting doorlopend",
+                        "termDuration": "P1M",
                        "billingDay": 15,
                        "highestInvoiceTerm": 1,
-                        "created": "2024-08-01 15:01:00.000",
+                        "created": "2024-08-01T15:01:00.000Z",
                        "ovPayTokenId": 1338,
+                        "contractVersions": [
+                          {
+                            "contractVersionId": 1,
+                            "termsAndConditions": "https://www.htm.nl/reisproducten/productvoorwaarden/htm-maandkorting/",
+                            "productId": 1,
+                            "productName": "HTM 20% Korting doorlopend",
+                            "taxCode": "V9",
+                            "taxPercentage": 9,
+                            "termAmountInclTax": 400,
+                            "start": "2024-08-01T15:01:00.000Z",
+                            "end": "2025-01-01T03:00:00.000Z"
+                          },
+                          {
+                            "contractVersionId": 2,
+                            "termsAndConditions": "https://www.htm.nl/reisproducten/productvoorwaarden/htm-maandkorting/",
+                            "productId": 1,
+                            "productName": "HTM 20% Korting doorlopend",
+                            "taxCode": "V9",
+                            "taxPercentage": 9,
+                            "termAmountInclTax": 500,
+                            "start": "2025-01-01T03:00:00.000Z",
+                            "end": "2025-02-01T03:00:00.000Z"
+                          }
+                        ],
                        "_links":
                          {
                            "get_token":
@ -154,8 +202,8 @@ paths:
                      "contractStatus":
                        { "contractStatusId": 2, "name": "active" },
                      "productId": 1,
-                      "productName": "HTM Maand 20% korting",
-                      "termDuration": "P0Y1M0D",
+                      "productName": "HTM 20% Korting doorlopend",
+                      "termDuration": "P1M",
                      "billingDay": 15,
                      "highestInvoiceTerm": 1,
                      "ovPayTokenId": 1337,
@ -165,22 +213,22 @@ paths:
                            "contractVersionId": 1,
                            "termsAndConditions": "https://www.htm.nl/reisproducten/productvoorwaarden/htm-maandkorting/",
                            "productId": 1,
-                            "productName": "HTM Maand 20% korting",
+                            "productName": "HTM 20% Korting doorlopend",
                            "taxCode": "V9",
                            "taxPercentage": 9.0,
                            "termAmountInclTax": 400,
-                            "start": "2024-07-04 15:01:00.000",
-                            "end": "2024-12-31 15:01:00.000",
+                            "start": "2024-08-01T15:01:00.000Z",
+                            "end": "2025-01-01T03:00:00.000Z",
                          },
                          {
                            "contractVersionId": 2,
                            "termsAndConditions": "https://www.htm.nl/reisproducten/productvoorwaarden/htm-maandkorting/",
                            "productId": 1,
-                            "productName": "HTM Maand 20% korting",
+                            "productName": "HTM 20% Korting doorlopend",
                            "taxCode": "V9",
                            "taxPercentage": 9.0,
                            "termAmountInclTax": 400,
-                            "start": "2025-01-01 15:01:00.000",
+                            "start": "2025-01-01T03:00:00.000Z",
                          },
                        ],
                      "contractActions":
@ -190,7 +238,7 @@ paths:
                            "actionType":
                              { "actionTypeId": 1, "name": "create" },
                            "user": "subid123456",
-                            "timestamp": "2024-07-02 15:01:00.000",
+                            "timestamp": "2024-07-02T15:01:00.000Z",
                            "details": "Contract created",
                            "correlationId": "976e7a4c-bf24-43d2-b444-55817556e7ee",
                          },
@ -199,7 +247,7 @@ paths:
                            "actionType":
                              { "actionTypeId": 2, "name": "change" },
                            "user": "subid123456",
-                            "timestamp": "2024-07-03 15:01:00.000",
+                            "timestamp": "2024-07-03T15:01:00.000Z",
                            "details": "Contract changed",
                            "correlationId": "e2462347-6749-4841-b42a-cf8de19ec727",
                          },
@ -211,8 +259,8 @@ paths:
                            "externalReference": "F2024-0001",
                            "term": 1,
                            "invoiceDate": "2024-07-02",
-                            "created": "2024-07-02 15:01:00.000",
-                            "updated": "2024-07-02 15:01:00.000",
+                            "created": "2024-07-02T15:01:00.000Z",
+                            "updated": "2024-07-02T15:01:00.000Z",
                            "state": "invoice_created",
                            "data": "{json}",
                            "isCredit": false,
@ -270,8 +318,8 @@ paths:
                        "externalReference": "F2024-0001",
                        "term": 1,
                        "invoiceDate": "2024-07-02",
-                        "created": "2024-07-02 15:01:34.000",
-                        "updated": "2024-07-04 00:04:56.000",
+                        "created": "2024-07-02T15:01:34.000Z",
+                        "updated": "2024-07-04T00:04:56.000Z",
                        "state": "invoice_created",
                        "public_link": "http://mijnfactuurinzien.nl/F2024-0001",
                        "isCredit": false,
@ -282,8 +330,8 @@ paths:
                        "externalReference": "F2024-0002",
                        "term": 2,
                        "invoiceDate": "2024-08-02",
-                        "created": "2024-08-02 15:01:34.000",
-                        "updated": "2024-08-04 00:04:56.000",
+                        "created": "2024-08-02T15:01:34.000Z",
+                        "updated": "2024-08-04T00:04:56.000Z",
                        "state": "invoice_created",
                        "public_link": "http://mijnfactuurinzien.nl/F2024-0002",
                        "isCredit": false,
@ -328,8 +376,8 @@ paths:
                      "cancellationMoment": "termBound",
                      "termDuration": "P1M",
                      "billingDay": 18,
-                      "cancellationFrom": "2024-08-10T00:00:00",
-                      "cancellationUntil": "2026-08-10T00:00:00",
+                      "cancellationFrom": "2024-08-10T00:00:00Z",
+                      "cancellationUntil": "2026-08-10T00:00:00Z",
                    }
  /contracts/{contractId}/cancellationvalidation:
    parameters:
@ -382,7 +430,7 @@ paths:
                    {
                      "validationResult": true,
                      "validationMessage": "",
-                      "end": "2024-08-10T03:59:59",
+                      "end": "2024-08-10T03:59:59Z",
                      "refundAmount": 2489,
                      "refundMethods": ["creditInvoice", "iDeal"],
                    }
@ -451,7 +499,7 @@ paths:
                    the refund amount and refund method.
                  value:
                    {
-                      "end": "2024-08-10T03:59:59",
+                      "end": "2024-08-10T03:59:59Z",
                      "refundAmount": 2489,
                      "refundMethod": "creditInvoice",
                    }
@ -516,8 +564,8 @@ paths:
                            "taxCode": "V9",
                            "taxPercentage": 9.0,
                            "termAmountInclTax": 400,
-                            "start": "2024-07-04 15:01:00.000",
-                            "end": "2024-12-31 15:01:00.000",
+                            "start": "2024-07-04T15:01:00.000Z",
+                            "end": "2024-12-31T15:01:00.000Z",
                          },
                          {
                            "contractVersionId": 2,
@ -527,7 +575,8 @@ paths:
                            "taxCode": "V9",
                            "taxPercentage": 9.0,
                            "termAmountInclTax": 400,
-                            "start": "2025-01-01 15:01:00.000",
+                            "start": "2025-01-01T15:01:00.000Z",
+                            "end": null
                          },
                        ],
                      "contractActions":
@ -537,7 +586,7 @@ paths:
                            "actionType":
                              { "actionTypeId": 1, "name": "create" },
                            "user": "subid123456",
-                            "timestamp": "2024-07-02 15:01:00.000",
+                            "timestamp": "2024-07-02T15:01:00.000Z",
                            "details": "Contract created",
                            "correlationId": "976e7a4c-bf24-43d2-b444-55817556e7ee",
                          },
@ -546,7 +595,7 @@ paths:
                            "actionType":
                              { "actionTypeId": 2, "name": "change" },
                            "user": "subid123456",
-                            "timestamp": "2024-07-03 15:01:00.000",
+                            "timestamp": "2024-07-03T15:01:00.000Z",
                            "details": "Contract changed",
                            "correlationId": "e2462347-6749-4841-b42a-cf8de19ec727",
                          },
@ -558,8 +607,8 @@ paths:
                            "externalReference": "F2024-0001",
                            "term": 1,
                            "invoiceDate": "2024-07-02",
-                            "created": "2024-07-02 15:01:00.000",
-                            "updated": "2024-07-02 15:01:00.000",
+                            "created": "2024-07-02T15:01:00.000Z",
+                            "updated": "2024-07-02T15:01:00.000Z",
                            "state": "invoice_created",
                            "data": "{json}",
                            "isCredit": false,
@ -682,7 +731,7 @@ paths:
                          "termDuration": "P0Y1M0D",
                          "billingDay": 15,
                          "highestInvoiceTerm": 1,
-                          "created": "2024-08-01 15:01:00.000",
+                          "created": "2024-08-01T15:01:00.000Z",
                          "ovPayTokenId": 1337,
                          "contractVersions":
                            [
@ -781,7 +830,7 @@ paths:
                      "termDuration": "P0Y1M0D",
                      "billingDay": 15,
                      "highestInvoiceTerm": 1,
-                      "created": "2024-08-01 15:01:00.000",
+                      "created": "2024-08-01T15:01:00.000Z",
                      "ovPayTokenId": 1337,
                      "contractVersions":
                        [
--- a/src/openapi/customers/SE-customers-v2.yaml
+++ b/src/openapi/customers/SE-customers-v2.yaml
@ -1081,6 +1081,10 @@ paths:
                                "photo": null,
                              },
                            "gboAgeProfile": null,
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
                            "_links":
                              {
                                "self":
@ -1130,9 +1134,9 @@ paths:
                            },
                        },
                    }
-                OV pas without PAD:
-                  summary: OV pas without PAD
-                  description: OV pas without PAD
+                OV pas without PAD, without AGO:
+                  summary: OV pas without PAD, without AGO
+                  description: OV pas without PAD, without AGO
                  value:
                    {
                      "ovPayTokens":
@ -1164,6 +1168,10 @@ paths:
                                "photo": null,
                              },
                            "gboAgeProfile": null,
+                            "tatSecurity": {
+                              "isSecured": false,
+                              "isAuthorized": false,
+                            },
                            "_links":
                              {
                                "self":
@ -1201,6 +1209,10 @@ paths:
                                    "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens/51compare",
                                    "method": "POST",
                                  },
+                                "secure": {
+                                  "href": "/tokens/securetoken",
+                                  "method": "POST"
+                                }
                              },
                          },
                        ],
@ -1213,9 +1225,9 @@ paths:
                            },
                        },
                    }
-                OV pas with PAD and autoReload:
-                  summary: OV pas with PAD and autoReload
-                  description: OV pas with PAD and autoReload
+                OV pas with PAD, with autoReload, with AGO:
+                  summary: OV pas with PAD, with autoReload, with AGO
+                  description: OV pas with PAD, with autoReload, with AGO
                  value:
                    {
                      "ovPayTokens":
@ -1287,6 +1299,10 @@ paths:
                                "ageFromInclusive": 4,
                                "ageToInclusive": 11,
                              },
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
                            "_links":
                              {
                                "self":
@ -1385,6 +1401,10 @@ paths:
                                "ageFromInclusive": 4,
                                "ageToInclusive": 11,
                              },
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
                            "_links":
                              {
                                "self":
@ -1501,6 +1521,10 @@ paths:
                                "ageFromInclusive": 4,
                                "ageToInclusive": 11,
                              },
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
                            "_links":
                              {
                                "self":
@ -1577,6 +1601,22 @@ paths:
                                "birthdate": null,
                                "photo": null,
                              },
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": false,
+                            },
+                            "_links":{
+                                "self":
+                                  {
+                                    "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens?ovPaytokenId=1",
+                                    "method": "GET",
+                                  },
+                                "authorize": 
+                                  {
+                                    "href": "/tokens/authorizetoken",
+                                    "method": "POST"
+                                  }                            
+                            }
                          },
                          {
                            "customerProfileId": 1,
@ -1599,6 +1639,17 @@ paths:
                                "photo": null,
                              },
                            "gboAgeProfile": null,
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
+                            "_links":{
+                                "self":
+                                  {
+                                    "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens?ovPaytokenId=1",
+                                    "method": "GET",
+                                  },
+                            }
                          },
                          {
                            "customerProfileId": 18,
@ -1621,6 +1672,17 @@ paths:
                                "photo": null,
                              },
                            "gboAgeProfile": null,
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
+                            "_links":{
+                                "self":
+                                  {
+                                    "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens?ovPaytokenId=1",
+                                    "method": "GET",
+                                  },
+                            }
                          },
                          {
                            "customerProfileId": 132,
@ -1643,6 +1705,17 @@ paths:
                                "photo": null,
                              },
                            "gboAgeProfile": null,
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
+                            "_links":{                            
+                                "self":
+                                  {
+                                    "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens?ovPaytokenId=1",
+                                    "method": "GET",
+                                  },
+                            }
                          },
                          {
                            "customerProfileId": 166,
@ -1668,6 +1741,22 @@ paths:
                                "photo": null,
                              },
                            "gboAgeProfile": null,
+                            "tatSecurity": {
+                              "isSecured": false,
+                              "isAuthorized": false,
+                            },
+                            "_links":{                            
+                                "self":
+                                  {
+                                    "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens?ovPaytokenId=1",
+                                    "method": "GET",
+                                  },
+                                "secure": 
+                                  {
+                                    "href": "/tokens/securetoken",
+                                    "method": "POST"
+                                  }
+                            }
                          },
                          {
                            "customerProfileId": 166,
@ -1690,6 +1779,17 @@ paths:
                                "photo": null,
                              },
                            "gboAgeProfile": null,
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
+                            "_links":{
+                                "self":
+                                  {
+                                    "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens?ovPaytokenId=1",
+                                    "method": "GET",
+                                  },
+                            }
                          },
                          {
                            "customerProfileId": 1,
@ -1712,6 +1812,17 @@ paths:
                                "photo": null,
                              },
                            "gboAgeProfile": null,
+                            "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
+                            "_links":{
+                                "self":
+                                  {
+                                    "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens?ovPaytokenId=1",
+                                    "method": "GET",
+                                  },
+                            }
                          },
                        ],
                      _links:
@ -1812,6 +1923,10 @@ paths:
                          "personalAccountData":
                            { "name": null, "birthdate": null, "photo": null },
                          "gboAgeProfile": null,
+                          "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
                          "_links":
                            {
                              "self":
@ -1890,6 +2005,10 @@ paths:
                          "personalAccountData":
                            { "name": null, "birthdate": null, "photo": null },
                          "gboAgeProfile": null,
+                          "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": false,
+                            },
                          "_links":
                            {
                              "self":
@ -1927,6 +2046,12 @@ paths:
                                  "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/customers/tokens/1/compare",
                                  "method": "POST",
                                },
+                              "authorize":{                              
+                                  {
+                                    "href": "/tokens/authorizetoken",
+                                    "method": "POST"
+                                  }
+                              }
                            },
                        },
                      "_links":
@ -2086,6 +2211,10 @@ paths:
                          "personalAccountData":
                            { "name": null, "birthdate": null, "photo": null },
                          "gboAgeProfile": null,
+                          "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
                          "_links":
                            {
                              "self":
@ -2149,6 +2278,10 @@ paths:
                          "personalAccountData":
                            { "name": null, "birthdate": null, "photo": null },
                          "gboAgeProfile": null,
+                          "tatSecurity": {
+                              "isSecured": true,
+                              "isAuthorized": true,
+                            },
                          "_links":
                            {
                              "self":
@ -3636,7 +3769,6 @@ paths:
                        "vouchers": []
                      }
                    }
- 
  /customers/devices:
    post:
      summary: Add a new device to a customer profile.
@ -4603,4 +4735,3 @@ components:
                        customerDataItem:
                          type: string
                          example: emailAddress
-               
--- a/src/openapi/customers/SE-tat-security.yaml
+++ b/src/openapi/customers/SE-tat-security.yaml
@ -0,0 +1,617 @@
+openapi: 3.0.1
+info:
+  title: Service Engine APIs for TAT security
+  description: >-
+    Service Engine APIs for TAT security. These are NOT the raw GBO APIs to access TAT security at GBO directly.
+    To be used by touch points to get secure a TAT.
+  version: "2.0"
+servers:
+  - url: https://services.acc.api.htm.nl/abt/touchpoint/2.0
+tags:
+  - name: TAT Security
+paths:
+  /tokens/status:
+    parameters:
+    - name: X-HTM-JWT-AUTH-HEADER
+      in: header
+      schema:
+        type: string
+        example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
+      required: false
+      description: The JWT of a customer in case of touchpoint were customer logs in themselves
+    - name: X-HTM-CUSTOMER-PROFILE-ID-HEADER
+      in: header
+      schema:
+        type: integer
+        example: 323
+      required: false
+      description: The id of the customer Profile
+    - name: X-HTM-ROLE-HEADER
+      in: header
+      schema:
+        type: string
+        example: Customer
+      required: false
+      description: The role of the HTM employee in the case of the SMP
+    - name: xTat
+      in: query
+      schema:
+        type: string
+        format : uuid
+        example: 5c4cba83-1ecd-46a4-b712-a8de0dcb7bbf
+      required: false
+      description: The xtat of the customerToken
+    - name: ovPayTokenId
+      in: query
+      schema:
+        type: integer
+        example: 1
+      required: false
+      description: The ovpay token id of a specific customer token
+    - name: serviceReferenceId
+      in: query
+      schema:
+        type: string
+        example: NLOV1234567ABCDEFG
+      required: false
+      description: The serviceReferencId found on the bankstatement for a given trip with a bankcard, required for an unknown EMV card
+    - name: amount
+      in: query
+      schema:
+        type: integer
+        example: 0
+      required: false
+      description: The amount of the value of the bankstatement in cents, required for an unknown EMV card   
+    - name: ovpasNumber
+      in: query
+      schema:
+        type: string
+        example: OV34567
+      required: false
+      description: The number of the ovpas, required for an unknown Ovpas card
+    - name: verificationCode
+      in: query
+      schema:
+        type: string
+        example: HL78
+      required: false
+      description: The 4 digit verificationCode found on the backside of the Ovpas, required for an unknown Ovpas card
+    get:
+      tags:
+        - TAT Security
+      summary: Check the status of the security and authorization status of the given token
+      description: Check the status of the security and authorization status of the given token, check anonymous tokenDB if no customer headers are supplied otherwise check customer tokenDB
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+               $ref: "#/components/schemas/TokenStatusResponse"
+              examples:
+                isSecuredandnotAuthorized:
+                  summary: Token is secured but HTM is not authorized
+                  description: Token is secured but HTM is not authorized
+                  value:
+                    isSecured: true
+                    isAuthorized: false
+                    xTat: 12da8f2a-6390-408a-94eb-a6701b5daf27
+                    _links: {
+                      "authorize": {
+                        "href": "/tokens/authorizetoken",
+                        "method": "POST"
+                      }
+                    }
+                notSecuredandnotAuthorized:
+                  summary: Token is not secured but HTM is not authorized
+                  description: Token is not secured but HTM is not authorized
+                  value:
+                    isSecured: false
+                    isAuthorized: false
+                    xTat: 12da8f2a-6390-408a-94eb-a6701b5daf27
+                    _links: {
+                      "secure": {
+                        "href": "/tokens/securetoken",
+                        "method": "POST"
+                      }
+                    }
+        "400":
+          description: Bad Request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Missing Parameters:
+                  value:
+                    status: 400
+                    title: Missing Mandatory Parameter
+                    detail: Required parameter {0} is missing.
+                Invalid Parameters:
+                  value:
+                    status: 400
+                    title: Invalid Parameter
+                    detail: Required parameter {0} is invalid.
+        "404":
+          description: Not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                TAT not found:
+                  value:
+                    status: 404
+                    title: Not Found
+                    detail: XTAT Account Not Found
+        "500":
+          description: Internal server error
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              example:
+                error: An unknown error has occurred
+  /tokens/securetoken:
+    parameters:
+    - name: X-HTM-JWT-AUTH-HEADER
+      in: header
+      schema:
+        type: string
+        example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
+      required: false
+      description: The JWT of a customer in case of touchpoint were customer logs in themselves
+    - name: X-HTM-CUSTOMER-PROFILE-ID-HEADER
+      in: header
+      schema:
+        type: integer
+        example: 323
+      required: false
+      description: The id of the customer Profile
+    - name: X-HTM-ROLE-HEADER
+      in: header
+      schema:
+        type: string
+        example: Customer
+      required: false
+      description: The role of the HTM employee in the case of the SMP
+    post:
+      tags:
+        - TAT Security
+      summary: Request additional OV-pas security for a token either in profile or anonymous.
+      description: Request additional OV-pas security for a token either in profile or anonymous
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/SecureTokenRequest"
+            examples:
+              With customer account:
+                value:
+                  ovPayTokenId: 42
+                  emailAddress: stasjo@htm.nl
+              Without customer account:
+                value:
+                  xTat: 62914b49-2c7f-437f-b4b0-2ad61a9f902d
+                  emailAddress: stasjo@htm.nl
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+               $ref: "#/components/schemas/EmailNotPreApprovedResponse"
+              example:
+                recipient: xxxxxx.user@gmail.com
+                description: OTP Sent
+                _links: {
+                  "verifyotp": {
+                    "href": "/tokens/verifyotp",
+                    "method": "POST"
+                  }
+                }
+        "400":
+          description: Bad Request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Missing Parameters:
+                  value:
+                    status: 400
+                    title: Missing Mandatory Parameter
+                    detail: Required parameter {0} is missing.
+                Invalid Parameters:
+                  value:
+                    status: 400
+                    title: Invalid Parameter
+                    detail: Required parameter {0} is invalid.
+        "401":
+          description: Unauthorized
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Unauthorized:
+                  value:
+                    status: 401
+                    title: Unauthorized
+                    detail: Invalid Access Token
+        "404":
+          description: Not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                TAT not found:
+                  value:
+                    status: 404
+                    title: Not Found
+                    detail: TAT Account Not Found
+        "409":
+          description: Conflict
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+              examples:
+                TAT Already Secured:
+                  value:
+                    status: 409
+                    title: Conflict
+                    detail: TAT Already Secured
+        "500":
+          description: Internal server error
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              example:
+                error: An unknown error has occurred
+  /tokens/authorizetoken:
+    parameters:
+    - name: X-HTM-JWT-AUTH-HEADER
+      in: header
+      schema:
+        type: string
+        example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
+      required: false
+      description: The JWT of a customer in case of touchpoint were customer logs in themselves
+    - name: X-HTM-CUSTOMER-PROFILE-ID-HEADER
+      in: header
+      schema:
+        type: integer
+        example: 323
+      required: false
+      description: The id of the customer Profile
+    - name: X-HTM-ROLE-HEADER
+      in: header
+      schema:
+        type: string
+        example: Customer
+      required: false
+      description: The role of the HTM employee in the case of the SMP
+    post:
+      tags:
+        - TAT Authorization
+      summary: Request authorization for HTM to access the data secured by additional OV-pas security for a token either in profile or anonymous.
+      description: Request authorization for HTM to access the data secured by additional OV-pas security for a token either in profile or anonymous.
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/AuthorizeTokenRequest"
+            examples:
+              With customer account:
+                value:
+                  ovPayTokenId: 42
+              Without customer account:
+                value:
+                  xTat: 62914b49-2c7f-437f-b4b0-2ad61a9f902d
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+               $ref: "#/components/schemas/EmailNotPreApprovedResponse"
+              example:
+                recipient: xxxxxx.user@gmail.com
+                description: OTP Sent
+                _links: {
+                  "verifyotp": {
+                    "href": "/tokens/verifyotp",
+                    "method": "POST"
+                  }
+                }
+        "400":
+          description: Bad Request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Missing Parameters:
+                  value:
+                    status: 400
+                    title: Missing Mandatory Parameter
+                    detail: Required parameter {0} is missing.
+                Invalid Parameters:
+                  value:
+                    status: 400
+                    title: Invalid Parameter
+                    detail: Required parameter {0} is invalid.
+        "401":
+          description: Unauthorized
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Unauthorized:
+                  value:
+                    status: 401
+                    title: Unauthorized
+                    detail: Invalid Access Token
+        "404":
+          description: Not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                TAT not found:
+                  value:
+                    status: 404
+                    title: Not Found
+                    detail: TAT Account Not Found
+        "500":
+          description: Internal server error
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              example:
+                error: An unknown error has occurred
+  /tokens/verifyotp:
+    parameters:
+    - name: X-HTM-JWT-AUTH-HEADER
+      in: header
+      schema:
+        type: string
+        example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
+      required: false
+      description: The JWT of a customer in case of touchpoint were customer logs in themselves
+    - name: X-HTM-CUSTOMER-PROFILE-ID-HEADER
+      in: header
+      schema:
+        type: integer
+        example: 323
+      required: false
+      description: The id of the customer Profile
+    - name: X-HTM-ROLE-HEADER
+      in: header
+      schema:
+        type: string
+        example: Customer
+      required: false
+      description: The role of the HTM employee in the case of the SMP
+    post:
+      tags:
+        - TAT Verification
+      summary: Submit an OTP for a triggered OTP flow.
+      description: |
+        Submit an OTP for a triggered OTP flow. This can either be result of an AGO activation, or
+        result of an AGO authorization flow. Since the backoffice behaves slightly different depending 
+        on which use case is executed, the calling TP needs to provide an `action` in the request body.
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/VerifyOtpRequest"
+            examples:
+              OTP verification for TAT security activation for token in customer account:
+                value:
+                  ovPayTokenId: 42
+                  otp: 123456
+                  action: secure
+              OTP verification for TAT security authorization for anonymous token:
+                value:
+                  xTat: 0f0defe8-828c-48e5-97e5-26d1d0179ef0
+                  otp: 123456
+                  action: authorize  
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/VerifyOtpResponse'
+              examples:
+                Tat Secured:
+                  value:
+                    status: Success
+                    description: TAT Secured
+                Tat Unsecured:
+                  value:
+                    status: Success
+                    description: TAT Unsecured
+                Tat Authorized:
+                  value:
+                    status: Success
+                    description: TAT Authorized
+        "400":
+          description: Bad request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Missing Parameters:
+                  value:
+                    status: 400
+                    title: Missing Mandatory Parameter
+                    detail: Required parameter {0} is missing.
+                Invalid Parameters:
+                  value:
+                    status: 400
+                    title: Invalid Parameter
+                    detail: Required parameter {0} is invalid.
+        "401":
+          description: Unauthorized
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              examples:
+                Unauthorized:
+                  value:
+                    status: 401
+                    title: Unauthorized
+                    detail: Invalid Access Token
+        "500":
+          description: Internal server error
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+              example:
+                error: An unknown error has occurred
+components:
+  schemas:
+    unavailable:
+      type: object
+    GenerateTatOutput:
+      type: object
+      properties:
+        uid:
+          type: string
+          description: >-
+            An uid IS A unique identifier THAT is associated with the
+            user.
+        recipient:
+          type: string
+          description: >-
+            A recipient IS A unique identifier THAT is associated with the
+            TAT owner.
+        key:
+          type: string
+          description: >-
+            A key IS a 32 character string THAT uniquely identifies the
+            OTP session.
+    EmailNotPreApprovedResponse:
+      type: object
+      description: >-
+        EmailNotPreApprovedResponse IS AN object THAT represents the response of
+        email pre-approval check.
+      properties:
+        recipient:
+          type: string
+          description: >-
+            A recipient IS A unique identifier THAT is associated with the TAT
+            owner.
+          example: xxxxxx.user@gmail.com
+        description:
+          type: string
+          description: >-
+            A description IS A string THAT describes the reason why the email is
+            not pre-approved.
+          example: OTP Sent
+    SecureTokenRequest:
+      type: object
+      properties:
+        ovPayTokenId:
+          type: integer
+          example: 42
+        xTat:
+          type: string
+          format: uuid
+          example: 6134db53-9ae5-41d1-a343-36656b60b510
+        emailAddress:
+          type: string
+          format: email
+          example: stasjo@htm.nl
+      required:
+        - emailAddress
+    AuthorizeTokenRequest:
+      type: object
+      properties:
+        ovPayTokenId:
+          type: integer
+          example: 42
+        xTat:
+          type: string
+          format: uuid
+          example: 6134db53-9ae5-41d1-a343-36656b60b510    
+    VerifyOtpRequest:
+      type: object
+      properties:
+        ovPayTokenId:
+          type: integer
+          example: 42
+        xTat:
+          type: string
+          format: uuid
+          example: f3474452-e1d4-428c-b366-e5ad5965eb8c
+        otp:
+          type: string
+          example: 123456
+        action:
+          type: string
+          example: secure
+      required:
+        - otp
+        - action
+    VerifyOtpResponse:
+      type: object
+      properties:
+        status:
+          type: string
+          example: Success
+        description: 
+          type: string
+          example: TAT Secured
+    ErrorResponse:
+      description: Default response when an invalid request has been sent
+      type: object
+      properties:
+        status:
+          type: integer
+          description: >-
+            A status IS An integer that represents the HTTP status code of the
+            response.
+          example: 400
+        title:
+          type: string
+          description: A title IS A string that provides a brief summary of the error.
+        detail:
+          type: string
+          description: A detail IS A string that provides more details about the error.
+    TokenStatusResponse:
+      type: object
+      description: >-
+        TokenStatusResponse IS AN object THAT represents the current state of the token in relation to the AGO security and authorization status of HTM.
+      required:
+        - isSecured
+        - isAuthorized
+      properties:
+        isSecured:
+          type: boolean
+          description: >-
+            Is the token secured in the national database (GBO)
+          example: false
+        isAuthorized:
+          type: boolean
+          description: >-
+            Does HTM have the authorization to access the secured data for this token, only applicable when isSecured equals True.
+          example: false
+        xTat:
+          type: string
+          format: uuid
+          description: >-
+            The xtat of the customerToken given when token is unknown for the customer
+          example: 883674e5-54c7-47d6-a3e3-8781f0d3ffea
+    
--- a/src/openapi/customers/customers-crud-v2.yaml
+++ b/src/openapi/customers/customers-crud-v2.yaml
@ -243,7 +243,7 @@ paths:
                          suffix: PhD
                          dateOfBirth: "2002-10-29"
                          emailAddresses: TEST@HTM.NL
-                          isEmailVerified: True
+                          isEmailVerified: false
                          addresses:
                            - addressId: 1
                              street: mystreet
@ -332,14 +332,6 @@ paths:
                            user: user
                            timestamp: "2023-10-20T17:05:52.000+02:00"
                            correlationId: 01c6d8b4-1cd3-4f9b-85ea-c9adca53ce95
-                        _links:
-                          {
-                            "self":
-                              {
-                                "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?customerProfileId=1",
-                                "method": "GET",
-                              },
-                          }
                      - customerProfileId: 12
                        customerNumber: 1000002
                        debtorNumber: DB100121
@ -377,7 +369,7 @@ paths:
                          suffix: PhD
                          dateOfBirth: "2002-10-29"
                          emailAddresses: TEST@HTM.NL
-                          isEmailVerified: False
+                          isEmailVerified: false
                          address:
                            - addressId: 1
                              street: mystreet
@ -467,32 +459,7 @@ paths:
                            user: user
                            timestamp: "2023-10-20T17:05:52.000+02:00"
                            correlationId: 01c6d8b4-1cd3-4f9b-85ea-c9adca53ce95
-                        _links:
-                          {
-                            "self":
-                              {
-                                "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?customerProfileId=12",
-                                "method": "GET",
-                              },
-                          }
-                    _links:
-                      {
-                        "self":
-                          {
-                            "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?offset=20",
-                            "method": "GET",
-                          },
-                        "prev":
-                          {
-                            "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers",
-                            "method": "GET",
-                          },
-                        "next":
-                          {
-                            "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?offset=40",
-                            "method": "GET",
-                          },
-                      }
+                    href: "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?offset=20&limit=20"                    
                getCustomerActive:
                  summary: getCustomerActive
                  description: >-
@ -526,7 +493,7 @@ paths:
                          suffix: PhD
                          dateOfBirth: "2002-10-29"
                          emailAddresses: TEST@HTM.NL
-                          isEmailVerified: False
+                          isEmailVerified: false
                          addresses:
                            - addressId: 1
                              street: mystreet
@ -615,22 +582,7 @@ paths:
                            user: user
                            timestamp: "2023-10-20T17:05:52.000+02:00"
                            correlationId: 01c6d8b4-1cd3-4f9b-85ea-c9adca53ce95
-                        _links:
-                          {
-                            "self":
-                              {
-                                "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?customerProfileId=1",
-                                "method": "GET",
-                              },
-                          }
-                    _links:
-                      {
-                        "self":
-                          {
-                            "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers",
-                            "method": "GET",
-                          },
-                      }
+                    href: https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?offset=20&limit=20    
                getCustomerBlocked:
                  summary: getCustomerBlocked
                  description: >-
@ -669,7 +621,7 @@ paths:
                          suffix: PhD
                          dateOfBirth: "2002-10-29"
                          emailAddresses: TEST@HTM.NL
-                          isEmailVerified: True
+                          isEmailVerified: false
                          addresses:
                            - addressId: 1
                              street: mystreet
@ -758,22 +710,7 @@ paths:
                            user: user
                            timestamp: "2023-10-20T17:05:52.000+02:00"
                            correlationId: 01c6d8b4-1cd3-4f9b-85ea-c9adca53ce95
-                        _links:
-                          {
-                            "self":
-                              {
-                                "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?customerProfileId=1",
-                                "method": "GET",
-                              },
-                          }
-                    _links:
-                      {
-                        "self":
-                          {
-                            "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/customers",
-                            "method": "GET",
-                          },
-                      }
+                    href: https://api.integratielaag.nl/abt/abtcustomers/2.0/customers?offset=20&limit=20    
        400:
          description: Bad Request
          content:
@ -835,7 +772,7 @@ paths:
                    suffix: jr
                    dateOfBirth: "1970-01-01"
                    emailAddress: j.jansen@hatseflats.nl
-                    isEmailVerified: False
+                    isEmailVerified: false
                    addresses:
                      - street: Laan van Meerdervoort
                        houseNumber: 5
@ -934,7 +871,7 @@ paths:
                      suffix: "jr",
                      dateOfBirth: "1970-01-01",
                      emailAddress: "TEST@TEST1.NL",
-                      isEmailVerified: False
+                      isEmailVerified: false
                    }
              updateCompleteEntity:
                value:                  
@ -946,7 +883,7 @@ paths:
                      suffix: "jr",
                      dateOfBirth: "1970-01-01",
                      emailAddress: "TEST@TEST1.NL",
-                      isEmailVerified: True
+                      isEmailVerified: false
                    }
        required: true
      responses:
@ -1438,13 +1375,7 @@ paths:
          content:
            application/json:
              schema:
-                $ref: "#/components/schemas/getDevices"
-              examples:
-                updateDeviceResponse:
-                  value:
-                    deviceId: "5bedce29-af0c-4f3c-b182-2caa8a1f9377"
-                    externalDeviceId: "7122a988-a00a-417d-a5b4-da2d91354976"
-                    alias: "iPhone zakelijk"
+                $ref: "#/components/schemas/patchDeviceResponse"
                      
      security:
        - default: []
@ -1607,24 +1538,7 @@ paths:
                        "replacedByTokenId": 12,
                      },
                    ],
-                  "_links":
-                    {
-                      "self":
-                        {
-                          "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/ovPayTokens?offset=20",
-                          "method": "GET",
-                        },
-                      "prev":
-                        {
-                          "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/ovPayTokens",
-                          "method": "GET",
-                        },
-                      "next":
-                        {
-                          "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/ovPayTokens?offset=40",
-                          "method": "GET",
-                        },
-                    },
+                  "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/ovPayTokens?offset=20&limit=20"
                }
  /customers/{customerProfileId}/ovpaytokens:
    post:
@ -1943,9 +1857,10 @@ paths:
                            "created": "2024-10-20T17:05:52.000",
                          },
                        ],
+                        "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/billingInformations?offset=20&limit=20"
                    }
                getBillingInformationSingleSpecificCustomer:
-                  summary: Get singel billing information entity for a specific customers
+                  summary: Get single billing information entity for a specific customers
                  description: >-
                    Found one billing information matching the search parameters
                  value:
@ -2135,59 +2050,7 @@ paths:
                            "updateTimestamp": "2024-03-22T08:55:00",
                          },
                        ],
-                      "_links":
-                        {
-                          "self":
-                            {
-                              "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/directdebitmandates",
-                              "method": "GET",
-                            },
-                          "next":
-                            {
-                              "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/directdebitmandates?offset=20",
-                              "method": "GET",
-                            },
-                        },
-                    }
-                getDirectDebitMandateWithNextPageandPreviousPage:
-                  value:
-                    {
-                      "directDebitMandates":
-                        [
-                          {
-                            "directDebitMandateId": 71,
-                            "customerProfileId": 12,
-                            "billingInformationId": 51,
-                            "directDebitMandateType":
-                              {
-                                "directDebitMandateTypeId": 1,
-                                "name": "import",
-                                "description": "import",
-                              },
-                            "created": "2024-03-22T08:55:00",
-                            "mandateReference": "CORE01",
-                            "mandateState": "SIGNED",
-                            "updateTimestamp": "2024-03-22T08:55:00",
-                          },
-                        ],
-                      "_links":
-                        {
-                          "self":
-                            {
-                              "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/directdebitmandates?offset=20",
-                              "method": "GET",
-                            },
-                          "prev":
-                            {
-                              "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/directdebitmandates",
-                              "method": "GET",
-                            },
-                          "next":
-                            {
-                              "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/directdebitmandates?offset=40",
-                              "method": "GET",
-                            },
-                        },
+                      "href": "https://api.integratielaag.nl/abt/abtcustomers/2.0/directdebitmandates?offset=20&limit=20"
                    }
  /billingInformation/{billingInformationId}/directdebitmandates:
    post:
@ -2843,7 +2706,7 @@ components:
        emailAddress:
          type: string
        isEmailVerified:
-          type: string
+          type: boolean
    postOvPayTokenResponse:
      type: object
      properties:
@ -2857,6 +2720,14 @@ components:
          type: array
          items:
            $ref: "#/components/schemas/getDeviceEntity"
+    patchDeviceResponse:
+      type: object
+      properties:
+        deviceId:
+          type: string
+          format: uuid
+          example: "b2c8a8c6-3d1c-4b6b-8f8d-3a6a1b6a1b6a"
+        
    getDeviceEntity:
      type: object
      properties:
--- a/src/openapi/fiko/fiko-crud.yaml
+++ b/src/openapi/fiko/fiko-crud.yaml
@ -49,6 +49,8 @@ paths:
                - status
                - aggregationReference
                - accountingSystemReference
+                - createdOn
+                - lastUpdatedOn
        - name: $select
          in: query
          description: Select properties to be returned
@ -79,6 +81,8 @@ paths:
                - status
                - aggregationReference
                - accountingSystemReference
+                - createdOn
+                - lastUpdatedOn
      responses:
        "200":
          description: OK
@ -118,6 +122,8 @@ paths:
                        status: created
                        aggregationReference: null
                        accountingSystemReference: null                        
+                        createdOn: 2024-11-04T00:00:00Z
+                        lastUpdatedOn: 2024-11-04T04:00:00Z
                      - "@odata.etag": e671c8a1-b918-4867-bf12-5289822479c3
                        transactionItemRowId: 3232
                        transactionItemId: 1c1fc1c8-57f4-4336-9b43-a974eae5afbf
@ -137,6 +143,8 @@ paths:
                        status: failed
                        aggregationReference: null
                        accountingSystemReference: null                        
+                        createdOn: 2024-11-04T00:00:00Z
+                        lastUpdatedOn: 2024-11-04T04:00:00Z
                      - "@odata.etag": be2715d4-4eff-4562-9bf3-5c43ad23e2c8
                        transactionItemRowId: 3233
                        transactionItemId: 3f58441e-dc8f-4956-9bc5-c952312476db
@ -156,6 +164,8 @@ paths:
                        status: returned to src
                        aggregationReference: FIKO-171f40609e
                        accountingSystemReference: null                        
+                        createdOn: 2024-11-04T00:00:00Z
+                        lastUpdatedOn: 2024-11-04T04:00:00Z
                      - "@odata.etag": 52130c4d-e944-4454-a73e-8d55449a4bd1
                        transactionItemRowId: 3234
                        transactionItemId: 4418825f-3f9b-45bc-b662-dc3cd4ce6599
@ -175,6 +185,8 @@ paths:
                        status: returned to trx-db
                        aggregationReference: null
                        accountingSystemReference: null                        
+                        createdOn: 2024-11-04T00:00:00Z
+                        lastUpdatedOn: 2024-11-04T04:00:00Z
                      - "@odata.etag": 7da305e1-85cd-4250-ad77-8b54b2649cfb
                        transactionItemRowId: 3235
                        transactionItemId: 2ddc1831-cf7b-4a77-8aa1-11aaf8e98d9f
@ -194,6 +206,8 @@ paths:
                        status: re-entered
                        aggregationReference: null
                        accountingSystemReference: null                        
+                        createdOn: 2024-11-04T00:00:00Z
+                        lastUpdatedOn: 2024-11-04T04:00:00Z
                      - "@odata.etag": c3b17d21-0506-474d-b3d4-7ff654f368b9
                        transactionItemRowId: 3236
                        transactionItemId: 5ab2513d-f334-4cf8-8895-4e7269374a4b
@ -213,6 +227,8 @@ paths:
                        status: succeeded
                        aggregationReference: FIKO-6a4fca8cd6
                        accountingSystemReference: U4F-123456                        
+                        createdOn: 2024-11-04T00:00:00Z
+                        lastUpdatedOn: 2024-11-04T04:00:00Z
      security:
        - default: []
      x-auth-type: Application & Application User
@ -434,7 +450,7 @@ paths:
      summary: Add a processing failure.
      description: Add a processing failure.
      tags:
-        - Failures v2.2
+        - Failures v2.3
      requestBody:
        required: true
        content:
@ -455,6 +471,7 @@ paths:
                  reasonCode: "012"
                  reasonDescription: Transaction date is in the future.
                  resolved: false
+                  journalEntryId: 0e53b984-16b2-4ef7-b669-29bcdad2a3ce
      responses:
        "201":
          description: Created
@ -472,67 +489,6 @@ paths:
        - default: []
      x-auth-type: Application & Application User
      x-throttling-tier: Unlimited
-  /transactionitems/{transactionItemId}/transactionaudittrails:
-    parameters:
-      - in: path
-        name: transactionItemId
-        schema:
-          type: string
-          format: uuid
-          example: 9834b346-d68c-438d-9bd5-6716422c2657
-        required: true
-        description: The id of the transaction item to process.
-    post:
-      summary: Add an audit trail entry.
-      description: Add an audit trail entry.
-      tags:
-        - Audit Trail v2.2
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: "#/components/schemas/TransactionAuditTrailsPostRequestBody"
-            examples:
-              Add new transaction audit trail for created transaction item:
-                summary: Add new transaction audit trail for created transaction item
-                description: Add a new audit trail record for a newly created transaction item.
-                value:
-                  user: fiko
-                  timestamp: 2022-01-01 12:34:00
-                  action: create
-                  status: created
-                  description: Transaction item created.
-                  correlationId: null
-              Add new transaction audit trail for updated transaction item:
-                summary: Add new transaction audit trail for updated transaction item
-                description: Add a new audit trail record for an updated transaction item.
-                value:
-                  user: ad.vogelaar
-                  timestamp: 2022-01-02 12:34:00
-                  action: update
-                  status: return to src
-                  description: Transaction item returned to source.
-                  correlationId: 0dc216ea-58e7-4a5e-aa18-449f0304209c
-      responses:
-        "201":
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/TransactionAuditTrailsPostResponseBody"
-              examples:
-                Transaction audit trail record created:
-                  summary: Transaction audit trail record created
-                  description: |
-                    A new audit trail record for this transaction item was successfully created. 
-                    The transactionAuditTrailId is returned as a reference for the consumer.
-                  value:
-                    transactionAuditTrailId: 37a8095b-19db-498f-9349-5f37d21c5bdf
-      security:
-        - default: []
-      x-auth-type: Application & Application User
-      x-throttling-tier: Unlimited
  /Odata/TransactionAuditTrail:
    get:
      summary: Find audit trail entries.
@ -564,6 +520,7 @@ paths:
                - action
                - status
                - correlationId
+                - journalEntryId
        - name: $select
          in: query
          description: Select properties to be returned
@ -584,6 +541,7 @@ paths:
                - action
                - status
                - correlationId
+                - journalEntryId
        - name: $expand
          in: query
          description: Expand related entities
@ -597,6 +555,7 @@ paths:
              type: string
              enum:
                - TransactionItem
+                - JournalEntry
      responses:
        "200":
          description: OK
@ -627,6 +586,7 @@ paths:
                        status: created
                        description: Transaction created.
                        correlationId: null
+                        journalEntryId: null
                      - "@odata.etag": 1ce407d3-4725-46b8-92b2-47282ccd38f5
                        transactionAuditTrailRowId: 8219
                        transactionAuditTrailId: 1d234fc1-eb16-41d3-b2e0-e400e17b017f
@ -637,6 +597,7 @@ paths:
                        status: created
                        description: Transaction created.
                        correlationId: null
+                        journalEntryId: null
                      - "@odata.etag": c8dec28b-bb85-4cb2-8a56-4a95fb2ed7bb
                        transactionAuditTrailRowId: 8220
                        transactionAuditTrailId: f4798a84-489d-4533-9dfe-42423c70f6b6
@ -647,6 +608,7 @@ paths:
                        status: return to src
                        description: Transaction retunred to source.
                        correlationId: a3891560-3084-42cb-867c-f289e7cda47d
+                        journalEntryId: null
                      - "@odata.etag": 967ddfa0-835e-4954-a4af-2eb11de325dc
                        transactionAuditTrailRowId: 8221
                        transactionAuditTrailId: cc80d58d-6ee7-409a-8c14-b1f807e67c10
@ -657,6 +619,7 @@ paths:
                        status: failed
                        description: Validation XYZ failed.
                        correlationId: null
+                        journalEntryId: a062f64f-f39e-48e7-9793-efbfa86d2827
                List containing multiple transaction audit trails of one transaction item:
                  summary: List containing multiple audit trails of one transaction item
                  description: List containing multiple audit trail records of one transaction item (with id `d667d293-aa82-4c9e-9b10-77cffc9058a1`).
@ -673,6 +636,7 @@ paths:
                        status: re-entered
                        description: Transaction re-entered.
                        correlationId: null
+                        journalEntryId: null
                      - "@odata.etag": 1ce407d3-4725-46b8-92b2-47282ccd38f5
                        transactionAuditTrailRowId: 8219
                        transactionAuditTrailId: b2192e6c-ab79-4000-a04d-d8f4d574a82f
@ -683,6 +647,7 @@ paths:
                        status: return to src
                        description: Transaction retunred to source.
                        correlationId: a3891560-3084-42cb-867c-f289e7cda47d
+                        journalEntryId: null
                      - "@odata.etag": c8dec28b-bb85-4cb2-8a56-4a95fb2ed7bb
                        transactionAuditTrailRowId: 8220
                        transactionAuditTrailId: 1d759985-7f1a-48bd-8dd1-efa30ce26423
@ -693,6 +658,7 @@ paths:
                        status: failed
                        description: Validation XYZ failed.
                        correlationId: null
+                        journalEntryId: b479507a-a65d-48b5-8476-87c88ba3c560
                      - "@odata.etag": 967ddfa0-835e-4954-a4af-2eb11de325dc
                        transactionAuditTrailRowId: 8221
                        transactionAuditTrailId: afce35b2-1dff-4ace-98d0-4b9ac405c87d
@ -703,6 +669,7 @@ paths:
                        status: created
                        description: Transaction created.
                        correlationId: null
+                        journalEntryId: null
                List containing multiple audit trails of different failed transactions:
                  summary: List containing multiple audit trails of different failed transactions
                  description: List containing multiple audit trails of different failed transactions (status = failed).
@ -719,6 +686,7 @@ paths:
                        status: failed
                        description: Validation XYZ failed.
                        correlationId: null
+                        journalEntryId: null
                      - "@odata.etag": 1ce407d3-4725-46b8-92b2-47282ccd38f5
                        transactionAuditTrailRowId: 8219
                        transactionAuditTrailId: 1d234fc1-eb16-41d3-b2e0-e400e17b017f
@ -729,6 +697,7 @@ paths:
                        status: failed
                        description: Validation XYZ failed.
                        correlationId: null
+                        journalEntryId: 43a98533-bb01-4aad-8d61-005051125969
                      - "@odata.etag": c8dec28b-bb85-4cb2-8a56-4a95fb2ed7bb
                        transactionAuditTrailRowId: 8220
                        transactionAuditTrailId: f4798a84-489d-4533-9dfe-42423c70f6b6
@ -739,6 +708,7 @@ paths:
                        status: failed
                        description: Validation XYZ failed.
                        correlationId: null
+                        journalEntryId: null
                      - "@odata.etag": 967ddfa0-835e-4954-a4af-2eb11de325dc
                        transactionAuditTrailRowId: 8221
                        transactionAuditTrailId: cc80d58d-6ee7-409a-8c14-b1f807e67c10
@ -749,6 +719,7 @@ paths:
                        status: failed
                        description: Validation XYZ failed.
                        correlationId: null
+                        journalEntryId: null
      security:
        - default: []
      x-auth-type: Application & Application User
@ -786,6 +757,7 @@ paths:
                - reasonDescription
                - resolved
                - change
+                - journalEntryId
        - name: $select
          in: query
          description: Select properties to be returned
@ -808,6 +780,7 @@ paths:
                - reasonDescription
                - resolved
                - change
+                - journalEntryId
        - name: $expand
          in: query
          description: Expand related entities
@ -821,6 +794,7 @@ paths:
              type: string
              enum:
                - TransactionItem                
+                - JournalEntry
      responses:
        "200":
          description: OK
@ -856,6 +830,7 @@ paths:
                        reasonDescription: Cost type does not exist.
                        resolved: false
                        change: null
+                        journalEntryId: null
                      - "@odata.etag": ff49829d-a5de-4c1a-b331-15fd9c71dfe9
                        processingFailureRowId: 10
                        processingFailureId: ccc06dc9-956d-47d8-bde7-9644ddde2193
@ -867,6 +842,7 @@ paths:
                        reasonDescription: Cost center does not exist.
                        resolved: true
                        change: Adapt config                        
+                        journalEntryId: null
                      - "@odata.etag": 5d5d3351-d3f1-49b2-905f-4dbbe1cc30e3
                        processingFailureRowId: 11
                        processingFailureId: 96bf8d44-0030-4509-b24e-2d62299779c5
@ -878,6 +854,7 @@ paths:
                        reasonDescription: Department does not exist.
                        resolved: true
                        change: Adapt config                        
+                        journalEntryId: null
                List of unfiltered processing failures:
                  summary: List of unfiltered processing failures
                  description: |
@ -897,6 +874,7 @@ paths:
                        reasonDescription: Transaction date is in the future
                        resolved: false
                        change: null                        
+                        journalEntryId: null
                      - "@odata.etag": 584d3a8a-48bc-45f9-99be-8dd70399e6e4
                        processingFailureRowId: 10
                        processingFailureId: 76aa82e1-a10f-4664-a84f-1f30d60884b3
@ -908,6 +886,7 @@ paths:
                        reasonDescription: Cost center does not exist.
                        resolved: false
                        change: null                        
+                        journalEntryId: null
                      - "@odata.etag": df4ade9b-1bda-4d91-a5ba-4dbe067568a0
                        processingFailureRowId: 11
                        processingFailureId: 25d2dd6f-ae17-44a7-b7a5-43eaf6de78e1
@ -919,6 +898,7 @@ paths:
                        reasonDescription: Department does not exist.
                        resolved: false
                        change: null                        
+                        journalEntryId: null
      security:
        - default: []
      x-auth-type: Application & Application User
@ -969,6 +949,415 @@ paths:
        - default: []
      x-auth-type: Application & Application User
      x-throttling-tier: Unlimited
+  /Odata/JournalEntries:
+    get:
+      summary: Find journalEntry.
+      description: Find journalEntry.
+      tags:
+        - Odata
+      parameters:
+        - $ref: "#/components/parameters/top"
+        - $ref: "#/components/parameters/skip"
+        - $ref: "#/components/parameters/filter"
+        - $ref: "#/components/parameters/count"
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          required: false
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+              enum:
+                - journalEntryId
+                - aggregationReference
+                - accountingSystemReference
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          required: false
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+              enum:
+                - journalEntryId
+                - aggregationReference
+                - accountingSystemReference
+                - data
+                - response
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/JournalEntryGetResponseBody"
+              examples:
+                List containing all journal entries:
+                  summary: List containing all journal entries
+                  description: Returns a list containing all journal entries (no filters applied).
+                  value:
+                    "@odata.context": "$metadata#JournalEntry"
+                    value:
+                      - "@odata.etag": 8f085711-eeae-44ed-bac1-06779bedb480
+                        journalEntryId: e0af8c8f-d421-4567-a14e-48e2a1bb86fb
+                        aggregationReference: FIKO-123456
+                        accountingSystemReference: null
+                        data: {
+                          "transaction": {
+                              "header": {
+                                  "key": {
+                                      "cmpCode": "1HTM",
+                                      "code": "OPBR-FIKO"
+                                  },
+                                  "timeStamp": 0,
+                                  "inputDate": "2026-07-20T00:00:00Z",
+                                  "period": "2026/6",
+                                  "curCode": "EUR",
+                                  "date": "2026-07-20T00:00:00Z",
+                                  "originalCompany": "1HTM",
+                                  "originalCode": "OPBR-FIKO",
+                                  "completionWorkflow": {
+                                      "completionStatus": "wfl_no_completion"
+                                  },
+                                  "salesInvoiceStatus": "salesinv_notyetinv"
+                              },
+                              "lines": {
+                                  "line": [
+                                      {
+                                          "number": 1,
+                                          "accountCode": "100.99999.D150000001",
+                                          "docValue": 100.00,
+                                          "lineType": "summary",
+                                          "lineSense": "debit",
+                                          "lineOrigin": "dl_orig_defined",
+                                          "description": "test",
+                                          "extRef1": "99999991",
+                                          "extRef2": "99999",
+                                          "sepaPaymentCategoryPurposeCode": "none",
+                                          "sepaPaymentPurposeCode": "none"
+                                          
+                                      },
+                                      {
+                                          "number": 2,
+                                          "accountCode": "642.41236.609311",
+                                          "docValue": 100.00,
+                                          "userStatus": "",
+                                          "lineType": "analysis",
+                                          "lineSense": "credit",
+                                          "lineOrigin": "dl_orig_defined",
+                                          "sepaPaymentCategoryPurposeCode": "none",
+                                          "sepaPaymentPurposeCode": "none"
+                                      }
+                                  ]
+                              }
+                          }
+                        }                        
+                        response: {
+                          "status": "failed",
+                          "message": [
+                              {
+                                  "code": "352",
+                                  "reason": "Documentregel 1 kan niet geboekt worden."
+                              },
+                              {
+                                  "code": "159",
+                                  "reason": "Element 99999 (niveau 2) is niet toegestaan in linkerlijst van element D150000001 (niveau 3)."
+                              }
+                          ],
+                          "hints": [],
+                          "paths": [
+                              "/InputRequest/PostToBooks/Request/Transaction/Lines/Line[1]/AccountCode"
+                          ]
+                        }
+                      - "@odata.etag": 66c033af-fc67-4eb2-9d17-d74a0166470f
+                        journalEntryId: 36a34bd8-2b84-4c89-87a4-22e809f6ed4a
+                        aggregationReference: FIKO-123457                      
+                        accountingSystemReference: "OPBR-FIKO10000090"
+                        data: {
+                          "transaction": {
+                              "header": {
+                                  "key": {
+                                      "cmpCode": "1HTM",
+                                      "code": "OPBR-FIKO"
+                                  },
+                                  "timeStamp": 0,
+                                  "inputDate": "2026-07-20T00:00:00Z",
+                                  "period": "2026/6",
+                                  "curCode": "EUR",
+                                  "date": "2026-07-20T00:00:00Z",
+                                  "originalCompany": "1HTM",
+                                  "originalCode": "OPBR-FIKO",
+                                  "completionWorkflow": {
+                                      "completionStatus": "wfl_no_completion"
+                                  },
+                                  "salesInvoiceStatus": "salesinv_notyetinv"
+                              },
+                              "lines": {
+                                  "line": [
+                                      {
+                                          "number": 1,
+                                          "accountCode": "100.99999.D150000001",
+                                          "docValue": 100.00,
+                                          "lineType": "summary",
+                                          "lineSense": "debit",
+                                          "lineOrigin": "dl_orig_defined",
+                                          "description": "test",
+                                          "extRef1": "99999991",
+                                          "extRef2": "99999",
+                                          "sepaPaymentCategoryPurposeCode": "none",
+                                          "sepaPaymentPurposeCode": "none"
+                                          
+                                      },
+                                      {
+                                          "number": 2,
+                                          "accountCode": "642.41236.609311",
+                                          "docValue": 100.00,
+                                          "userStatus": "",
+                                          "lineType": "analysis",
+                                          "lineSense": "credit",
+                                          "lineOrigin": "dl_orig_defined",
+                                          "sepaPaymentCategoryPurposeCode": "none",
+                                          "sepaPaymentPurposeCode": "none"
+                                      }
+                                  ]
+                              }
+                          }
+                        }                        
+                        response: {
+                          "key": {
+                            "$type": "finance_transaction_txnKey",
+                            "cmpCode": "1HTM",
+                            "code": "OPBR-FIKO",
+                            "number": "    10000090"
+                          },
+                          "suppliedNumber": ""
+                        }
+                      - "@odata.etag": 159f526c-3c88-48a1-93a0-e16430500bef
+                        journalEntryId: 6097121f-f300-4c0b-ab8d-0a24685bda92
+                        aggregationReference: FIKO-123458                      
+                        accountingSystemReference: null
+                        data: {
+                          "transaction": {
+                              "header": {
+                                  "key": {
+                                      "cmpCode": "1HTM",
+                                      "code": "OPBR-FIKO"
+                                  },
+                                  "timeStamp": 0,
+                                  "inputDate": "2026-07-20T00:00:00Z",
+                                  "period": "2026/6",
+                                  "curCode": "EUR",
+                                  "date": "2026-07-20T00:00:00Z",
+                                  "originalCompany": "1HTM",
+                                  "originalCode": "OPBR-FIKO",
+                                  "completionWorkflow": {
+                                      "completionStatus": "wfl_no_completion"
+                                  },
+                                  "salesInvoiceStatus": "salesinv_notyetinv"
+                              },
+                              "lines": {
+                                  "line": [
+                                      {
+                                          "number": 1,
+                                          "accountCode": "100.99999.D150000001",
+                                          "docValue": 100.00,
+                                          "lineType": "summary",
+                                          "lineSense": "debit",
+                                          "lineOrigin": "dl_orig_defined",
+                                          "description": "test",
+                                          "extRef1": "99999991",
+                                          "extRef2": "99999",
+                                          "sepaPaymentCategoryPurposeCode": "none",
+                                          "sepaPaymentPurposeCode": "none"
+                                          
+                                      },
+                                      {
+                                          "number": 2,
+                                          "accountCode": "642.41236.609311",
+                                          "docValue": 100.00,
+                                          "userStatus": "",
+                                          "lineType": "analysis",
+                                          "lineSense": "credit",
+                                          "lineOrigin": "dl_orig_defined",
+                                          "sepaPaymentCategoryPurposeCode": "none",
+                                          "sepaPaymentPurposeCode": "none"
+                                      }
+                                  ]
+                              }
+                          }
+                        }                        
+                        response: null
+      security:
+        - default: []
+      x-auth-type: Application & Application User
+      x-throttling-tier: Unlimited
+  /journalEntries:
+    post:
+      summary: Add a journalEntry.
+      description: Add a journalEntry.
+      tags:
+        - journalEntries v1.0
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/JournalEntryPostRequestBody"
+            examples:
+              Add a new journalEntry:
+                summary: Add a new journalEntry
+                description: In this example we add a new journalEntry.
+                value:
+                  aggregationReference: FIKO-123456
+                  data: {
+                    "transaction": {
+                        "header": {
+                            "key": {
+                                "cmpCode": "1HTM",
+                                "code": "OPBR-FIKO"
+                            },
+                            "timeStamp": 0,
+                            "inputDate": "2026-07-20T00:00:00Z",
+                            "period": "2026/6",
+                            "curCode": "EUR",
+                            "date": "2026-07-20T00:00:00Z",
+                            "originalCompany": "1HTM",
+                            "originalCode": "OPBR-FIKO",
+                            "completionWorkflow": {
+                                "completionStatus": "wfl_no_completion"
+                            },
+                            "salesInvoiceStatus": "salesinv_notyetinv"
+                        },
+                        "lines": {
+                            "line": [
+                                {
+                                    "number": 1,
+                                    "accountCode": "100.99999.D150000001",
+                                    "docValue": 100.00,
+                                    "lineType": "summary",
+                                    "lineSense": "debit",
+                                    "lineOrigin": "dl_orig_defined",
+                                    "description": "test",
+                                    "extRef1": "99999991",
+                                    "extRef2": "99999",
+                                    "sepaPaymentCategoryPurposeCode": "none",
+                                    "sepaPaymentPurposeCode": "none"
+                                    
+                                },
+                                {
+                                    "number": 2,
+                                    "accountCode": "642.41236.609311",
+                                    "docValue": 100.00,
+                                    "userStatus": "",
+                                    "lineType": "analysis",
+                                    "lineSense": "credit",
+                                    "lineOrigin": "dl_orig_defined",
+                                    "sepaPaymentCategoryPurposeCode": "none",
+                                    "sepaPaymentPurposeCode": "none"
+                                }
+                            ]
+                        }
+                    }
+                  }
+      responses:
+        "201":
+          description: Created
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/JournalEntryPostResponseBody"
+              examples:
+                Journalentry created successfully:
+                  summary: Journalentry created successfully
+                  description: TheJournalentry was successfully added to the database.
+                  value:
+                    journalEntryId: 6ce10520-9a73-4cb4-b8dd-39ee46ceb617
+      security:
+        - default: []
+      x-auth-type: Application & Application User
+      x-throttling-tier: Unlimited
+  /journalEntries/{journalEntryId}:
+    parameters:
+      - in: path
+        name: journalEntryId
+        schema:
+          type: string
+          format: uuid
+          example: 37a8095b-19db-498f-9349-5f37d21c5bdf
+        required: true
+        description: The id of the journalEntry.
+    patch:
+      summary: Update journalEntry.
+      description: Update journalEntry.
+      tags:
+        - journalEntries v1.0
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/JournalEntryPatchRequestBody"
+            examples:
+              Update an journalEntry after error:
+                summary: Update an journalEntry after error
+                description: Update an journalEntry after error by logging the response
+                value:
+                    response: {
+                      "status": "failed",
+                      "message": [
+                          {
+                              "code": "352",
+                              "reason": "Documentregel 1 kan niet geboekt worden."
+                          },
+                          {
+                              "code": "159",
+                              "reason": "Element 99999 (niveau 2) is niet toegestaan in linkerlijst van element D150000001 (niveau 3)."
+                          }
+                      ],
+                      "hints": [],
+                      "paths": [
+                          "/InputRequest/PostToBooks/Request/Transaction/Lines/Line[1]/AccountCode"
+                      ]
+                    }
+              Update an journalEntry after success:
+                summary: Update an journalEntry after succesfull call
+                description: Update an journalEntry after uccesfull call bij logging the response and the accountingSystemReference.
+                value:
+                    accountingSystemReference: "OPBR-FIKO10000090"
+                    response: {
+                      "key": {
+                          "$type": "finance_transaction_txnKey",
+                          "cmpCode": "1HTM",
+                          "code": "OPBR-FIKO",
+                          "number": "    10000090"
+                      },
+                      "suppliedNumber": ""
+                    }
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/JournalEntryPatchResponseBody"
+              examples:
+                JournalEntry updated successfully:
+                  summary: JournalEntry updated successfully
+                  description: The journalEntry was successfully updated in the database.
+                  value:
+                    journalEntryId: 5bbf5abc-4da5-4bb4-894e-a7f553789a20
+      security:
+        - default: []
+      x-auth-type: Application & Application User
+      x-throttling-tier: Unlimited
  /Odata/BookingProcess:
    get:
      summary: Find booking processes.
@ -3316,6 +3705,16 @@ components:
            - occurredOn
            - type
            - status
+        createdOn:
+          type: string
+          nullable: false
+          format: datetime
+          example: "2026-07-20T00:00:00Z"
+        updatedOn:
+          type: string
+          nullable: false
+          format: datetime
+          example: "2026-07-25T00:00:00Z"
    TransactionItemsBulkRequestBody:
      type: object
      properties:
@ -3551,6 +3950,11 @@ components:
          type: string
          nullable: true
          example: Adapt config
+        journalEntryId:
+          type: string
+          format: uuid
+          nullable: true
+          example: b51b377d-6c82-4c4f-9ed3-1068ab6e30c9 
      required:
        - timestamp
        - element
@ -3617,6 +4021,11 @@ components:
          type: string
          nullable: true
          example: Adapt config
+        journalEntryId:
+          type: string
+          format: uuid
+          nullable: true
+          example: b51b377d-6c82-4c4f-9ed3-1068ab6e30c9 
      required:
        - processingFailureId
        - transactionItemId
@ -3681,6 +4090,11 @@ components:
          format: uuid
          nullable: true
          example: 37a8095b-19db-498f-9349-5f37d21c5bdf
+        journalEntryId:
+          type: string
+          format: uuid
+          nullable: true
+          example: b51b377d-6c82-4c4f-9ed3-1068ab6e30c9       
      required:
        - user
        - timestamp
@ -3754,6 +4168,11 @@ components:
          format: uuid
          nullable: true
          example: a3891560-3084-42cb-867c-f289e7cda47d
+        journalEntryId:
+          type: string
+          format: uuid
+          nullable: true
+          example: b51b377d-6c82-4c4f-9ed3-1068ab6e30c9       
      required:
        - transactionAuditTrailId
        - transactionItemId
@ -3761,6 +4180,89 @@ components:
        - timestamp
        - action
        - status
+    JournalEntryGetResponseBody:
+      type: object
+      properties:
+        "@odata.context":
+          type: string
+          example: $metadata#JournalEntry
+        value:
+          type: array
+          items:
+            $ref: "#/components/schemas/JournalEntry"
+    JournalEntry:
+      type: object
+      properties:
+        "@odata.etag":
+          type: string
+          example: 333d6b7d-b709-3b89-89e0-bcb3d5fdddfc
+        journalEntryId:
+          type: string
+          format: uuid
+          example: 8871d779-512c-4d4d-9a8a-dee7c635179d
+        aggregationReference:
+          type: string
+          example: FIKO-123456
+        accountingSystemReference:
+          type: string
+          nullable: true
+          example:  U4F-123456
+        data:
+          type: object
+          example: {}
+        responses:
+          type: object          
+          nullable: true
+          example: {}
+      required:
+        - journalEntryId
+        - aggregationReference
+        - data
+    JournalEntryPostRequestBody:
+      type: object
+      properties:
+        aggregationReference:
+          type: string
+          example: FIKO-123456
+        accountingSystemReference:
+          type: string
+          nullable: true
+          example:  U4F-123456
+        data:
+          type: object
+          example: {}
+        responses:
+          type: object          
+          nullable: true
+          example: {}
+      required:
+        - aggregationReference
+        - data
+    JournalEntryPostResponseBody:
+      type: object
+      properties:
+        journalEntryId:
+          type: string
+          format: uuid
+          example: c97a8123-8d0e-41ea-9737-35843ebe2385
+    JournalEntryPatchRequestBody:
+      type: object
+      properties:
+        accountingSystemReference:
+          type: string
+          nullable: true
+          example:  U4F-123456
+        responses:
+          type: object          
+          nullable: true
+          example: {}
+    JournalEntryPatchResponseBody:
+      type: object
+      properties:
+        journalEntryId:
+          type: string
+          format: uuid
+          example: c97a8123-8d0e-41ea-9737-35843ebe2385
    BookingProcessesGetResponseBody:
      type: object
      properties:
--- a/src/openapi/orders/orders-crud.yaml
+++ b/src/openapi/orders/orders-crud.yaml
@ -111,14 +111,6 @@ paths:
          explode: false
          required: false
          description: Filter on most recent order status. 1 = concept, 2 = awaitingPayment, 3 = pendingPayment, 4 = paid, 5 = delivered, 6 = cancelled.
-        - in: query
-          name: issuedVoucherId
-          schema:
-            type: string
-            format: uuid
-            example: "b0a9f3c9-9b92-4f8c-b78d-6129be7218a6"
-          required: false
-          description: Filter on applied issuedVoucherId for the order.
      responses:
        "200":
          description: OK
@ -777,6 +769,13 @@ paths:
          example: 9e3363c8-e776-4675-b108-99b8c2e38eb6
        required: false
        description: The id of the orderLine
+      - in: query
+        name: issuedVoucherId
+        schema:
+          type: string
+          example: 9e3363c8-e776-4675-b108-99b8c2e38eb6
+        required: false
+        description: The id of the issuedVoucher
    get:
      summary: Find vouchers on the order
      description: Find vouchers on the order
--- a/src/openapi/orders/service_engine_orders.yaml
+++ b/src/openapi/orders/service_engine_orders.yaml
--- a/src/openapi/products/SE-products-SE.yaml
+++ b/src/openapi/products/SE-products-SE.yaml
@ -313,6 +313,7 @@ paths:
                    {
                      "productId": 24,
                      "parentProductId": null,
+                      "needsVoucher": false,
                      "layerInfo": null,
                      "fikoArticleNumber": "1234",
                      "gboPackageTemplateId": "30901",
@ -429,6 +430,7 @@ paths:
                    {
                      "productId": 126,
                      "parentProductId": null,
+                      "needsVoucher": false,
                      "layerInfo": {
                        "layerInfoId": 1,
                        "choiceKey": "isRenewable",
@ -537,6 +539,7 @@ paths:
                          {
                            "productId": 119,
                            "parentProductId": 126,
+                            "needsVoucher": false,
                            "layerInfo": null,
                            "fikoArticleNumber": "1234",
                            "gboPackageTemplateId": "30001",
@ -652,6 +655,7 @@ paths:
                          {
                            "productId": 120,
                            "parentProductId": 126,
+                            "needsVoucher": false,
                            "layerInfo": null,
                            "fikoArticleNumber": "1234",
                            "gboPackageTemplateId": "30001",
@ -779,6 +783,7 @@ paths:
                    {
                      "productId": 49,
                      "parentProductId": null,
+                      "needsVoucher": false,
                      "layerInfo": {
                        "layerInfoId": 2,
                        "choiceKey": "regio",
@ -926,6 +931,7 @@ paths:
                          {
                            "productId": 109,
                            "parentProductId": 49,
+                            "needsVoucher": false,
                            "layerInfo": {
                              "layerInfoId": 3,
                              "choiceKey": "allowedGboAgeProfiles",
@ -1076,6 +1082,7 @@ paths:
                                {
                                  "productId": 114,
                                  "parentProductId": 109,
+                                  "needsVoucher": false,
                                  "layerInfo": {
                                    "layerInfoId": 1,
                                    "choiceKey": "isRenewable",
@ -1226,6 +1233,7 @@ paths:
                                {
                                  "productId": 115,
                                  "parentProductId": 109,
+                                  "needsVoucher": false,
                                  "layerInfo": {
                                    "layerInfoId": 1,
                                    "choiceKey": "isRenewable",
@ -1377,6 +1385,7 @@ paths:
                                      {
                                        "productId": 116,
                                        "parentProductId": 115,
+                                        "needsVoucher": false,
                                        "layerInfo": null,
                                        "fikoArticleNumber": "1234",
                                        "gboPackageTemplateId": "33615",
@ -1526,6 +1535,7 @@ paths:
                                      {
                                        "productId": 117,
                                        "parentProductId": 115,
+                                        "needsVoucher": false,
                                        "layerInfo": null,
                                        "fikoArticleNumber": "1234",
                                        "gboPackageTemplateId": "33615",
@ -1679,6 +1689,7 @@ paths:
                          {
                            "productId": 112,
                            "parentProductId": 49,
+                            "needsVoucher": false,
                            "layerInfo": {
                              "layerInfoId": 3,
                              "choiceKey": "allowedGboAgeProfiles",
@ -2150,6 +2161,10 @@ components:
        parentProductId:
          type: integer
          example: 1
+        needsVoucher:
+          type: boolean
+          description: Indicates if the product needs a voucher (with this productId as requiredProductId) to be bought - if false, this is optional, but still allowed
+          example: false
        layerInfo:
          $ref: '#/components/schemas/LayerInfoResponse'
        fikoArticleNumber:
--- a/src/openapi/products/SE-products-TP.yaml
+++ b/src/openapi/products/SE-products-TP.yaml
@ -313,6 +313,7 @@ paths:
                    {
                      "productId": 24,
                      "parentProductId": null,
+                      "needsVoucher": false,
                      "layerInfo": null,
                      "fikoArticleNumber": "1234",
                      "gboPackageTemplateId": "30901",
@ -429,6 +430,7 @@ paths:
                    {
                      "productId": 126,
                      "parentProductId": null,
+                      "needsVoucher": false,
                      "layerInfo": {
                        "layerInfoId": 1,
                        "choiceKey": "isRenewable",
@ -537,6 +539,7 @@ paths:
                          {
                            "productId": 119,
                            "parentProductId": 126,
+                            "needsVoucher": false,
                            "layerInfo": null,
                            "fikoArticleNumber": "1234",
                            "gboPackageTemplateId": "30001",
@ -652,6 +655,7 @@ paths:
                          {
                            "productId": 120,
                            "parentProductId": 126,
+                            "needsVoucher": false,
                            "layerInfo": null,
                            "fikoArticleNumber": "1234",
                            "gboPackageTemplateId": "30001",
@ -779,6 +783,7 @@ paths:
                    {
                      "productId": 49,
                      "parentProductId": null,
+                      "needsVoucher": false,
                      "layerInfo": {
                        "layerInfoId": 2,
                        "choiceKey": "regio",
@ -926,6 +931,7 @@ paths:
                          {
                            "productId": 109,
                            "parentProductId": 49,
+                            "needsVoucher": false,
                            "layerInfo": {
                              "layerInfoId": 3,
                              "choiceKey": "allowedGboAgeProfiles",
@ -1076,6 +1082,7 @@ paths:
                                {
                                  "productId": 114,
                                  "parentProductId": 109,
+                                  "needsVoucher": false,
                                  "layerInfo": {
                                    "layerInfoId": 1,
                                    "choiceKey": "isRenewable",
@ -1226,6 +1233,7 @@ paths:
                                {
                                  "productId": 115,
                                  "parentProductId": 109,
+                                  "needsVoucher": false,
                                  "layerInfo": {
                                    "layerInfoId": 1,
                                    "choiceKey": "isRenewable",
@ -1377,6 +1385,7 @@ paths:
                                      {
                                        "productId": 116,
                                        "parentProductId": 115,
+                                        "needsVoucher": false,
                                        "layerInfo": null,
                                        "fikoArticleNumber": "1234",
                                        "gboPackageTemplateId": "33615",
@ -1526,6 +1535,7 @@ paths:
                                      {
                                        "productId": 117,
                                        "parentProductId": 115,
+                                        "needsVoucher": false,
                                        "layerInfo": null,
                                        "fikoArticleNumber": "1234",
                                        "gboPackageTemplateId": "33615",
@ -1679,6 +1689,7 @@ paths:
                          {
                            "productId": 112,
                            "parentProductId": 49,
+                            "needsVoucher": false,
                            "layerInfo": {
                              "layerInfoId": 3,
                              "choiceKey": "allowedGboAgeProfiles",
@ -2150,6 +2161,10 @@ components:
        parentProductId:
          type: integer
          example: 1
+        needsVoucher:
+          type: boolean
+          description: Indicates if the product needs a voucher (with this productId as requiredProductId) to be bought - if false, this is optional, but still allowed
+          example: false
        layerInfo:
          $ref: '#/components/schemas/LayerInfoResponse'
        fikoArticleNumber:
--- a/src/openapi/products/SE-vouchers-TP.yaml
+++ b/src/openapi/products/SE-vouchers-TP.yaml
@ -1,17 +1,17 @@
 openapi: 3.0.1
 info:
-  title: Service Engine APIs for HTM voucher for sales Touchpint
-  description: Service Engine APIs for HTM vouchers. These are NOT the CRUD APIs to the data hub. These ARE the api's for sales touchpoints.
+  title: Service Engine APIs for HTM voucher for sales Touchpoint
+  description: Service Engine APIs for HTM vouchers. These are NOT the CRUD APIs to the data hub. These ARE the APIs for sales touchpoints.
  version: "1.0"
 servers:
  - url: https://services.acc.api.htm.nl/abt/abtvouchersTouchpoint/1.0
 paths:
  /issuedvouchers/{voucherCode}:
    get:
-      summary: Get details of a voucher, that was issued for a specific touch point
+      summary: Get details of a voucher, that was issued for a specific touchpoint
      description:
-        Get details of an issued voucher for a specific touch point. This means that only products that the calling touch point is allowed to see or sell
-        (i.e. has active sellingPeriods for touchPointId of the calling touch point) are returned.
+        Get details of an issued voucher for a specific touchpoint. This means that only products that the calling touchpoint is allowed to see or sell
+        (i.e. has active sellingPeriods for touchPointId of the calling touchpoint) are returned.
      parameters:
        - name: voucherCode
          in: path
@ -28,98 +28,132 @@ paths:
          content:
            application/json:
              schema:
-                $ref: "#/components/schemas/unavailable"
+                $ref: "#/components/schemas/salesTouchpointIssuedVoucherResponse"
              examples:
-                Voucher for a product with required attributes:
-                  summary: Voucher for a single product with required attributes
+                Voucher that grants a voucher-only product for free:
+                  summary: Voucher that grants a voucher-only product for free
+                  description: |-
+                    Voucher that grants a product (that can only be acquired via a voucher) for free.
+                    In this case, the voucher has an amountInclTax of 0. If the requiredProduct has a
+                    non-zero sellingPrice (amountInclTax), the difference between sellingPrice and 
+                    voucher amountInclTax represents the granted discount. If the requiredProduct has 
+                    a sellingPrice of 0, no "discount" is shown; just the voucher's amountInclTax.
                  value:
                    {
                      "issuedVoucherId": "d4e5f6a7-b8c9-0d1e-2f3a-4b5c6d7e8f90",
-                      "voucherCode": "VOUCHER123",
+                      "voucherCode": "HTM-A7J-128-PYT",
                      "fromInclusive": "2024-10-04T00:00:00.000",
                      "untilInclusive": "2024-11-04T00:00:00.000",
-                      "voucherStatus": { "voucherStatusId": 1, "name": "New" },
+                      "voucherStatus": { "voucherStatusId": 2, "name": "issued" },
                      "product":
                        {
                          "productId": 263,
-                          "productName": "HTM-80001",
-                          "productDescription": "10 euro korting op Regiovrij maand.",
-                          "productCategory":
-                            {
-                              "productCategoryId": 9,
-                              "isTravelProduct": false,
-                              "name": "Voucher",
-                            },
-                          "amountInclTax": -1000,
+                          "productName": "Voucher Ooievaarspas-product AOW",
+                          "productDescription": "Voucher voor AOW-ers in Den Haag met een Ooievaarspas, die ingewisseld kan worden voor het product \"Ooievaarspas voor AOW-ers in Den Haag\"",
+                          "amountInclTax": 0,
                          "requiredProducts":
                            [
                              {
-                                "productId": 126,
-                                "productName": "HTM-30001",
-                                "productDescription": "Regiovrij maand.",
+                                "productId": 982,
+                                "productName": "Ooievaarspas voor AOW-ers in Den Haag",
+                                "productDescription": "Vrij reizen bij HTM voor Haagse AOW-gerechtigden met een Ooievaarspas.",
+                                "productCategory": 
+                                  {
+                                    "productCategoryId": 2,
+                                    "isTravelProduct": true,
+                                    "name": "Afgekocht reisrecht",
+                                  },
+                                "amountInclTax": 0,
                                "_links":
                                  {
                                    "get_details":
                                      {
-                                        "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/products/126",
+                                        "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/products/982",
                                        "method": "GET",
                                      },
                                  },
                              },
-                            ],
-                          "_links":
-                            {
-                              "get_details":
-                                {
-                                  "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/products/263",
-                                  "method": "GET",
-                                },
-                            },
+                            ]
                        },
                      "mandatoryCustomerDataItems":
                        [
                          {
                            "mandatoryCustomerDataItemId": 8,
-                            "customerDataItem": "padBirthDate",
-                          },
-                          {
-                            "mandatoryCustomerDataItemId": 4,
-                            "customerDataItem": "emailAddress",
-                          },
-                        ],
+                            "customerDataItem": "padBirthDate"
                          }
-                Voucher for a whole order:
-                  summary: Voucher for a whole order
+                        ]
+                    }
+                Voucher that grants a hybrid product for a reduced price:
+                  summary: Voucher that grants a hybrid product for a reduced price
+                  description: |-
+                    Voucher that grants a hybrid product (that can be acquired via voucher or via ordinary order flow) 
+                    for a reduced price. In this case, the voucher has an amountInclTax > 0, which dictates the (modified) 
+                    total amount that needs to be paid for said product. If the requiredProduct has a 
+                    non-zero sellingPrice (amountInclTax), the difference between sellingPrice and 
+                    voucher amountInclTax represents the granted discount. If the requiredProduct has 
+                    a sellingPrice of 0, no "discount" is shown; just the voucher's amountInclTax./
+                    Specifically, in this example, the product "HTM 20% Korting" can be purchased for 1 euro instead of 5 euro.
                  value:
                    {
                      "issuedVoucherId": "d4e5f6a7-b8c9-0d1e-2f3a-4b5c6d7e8f90",
-                      "voucherCode": "VOUCHER123",
+                      "voucherCode": "HTM-A7J-128-PYT",
                      "fromInclusive": "2024-10-04T00:00:00.000",
                      "untilInclusive": "2024-11-04T00:00:00.000",
-                      "voucherStatus": { "voucherStatusId": 1, "name": "New" },
+                      "voucherStatus": { "voucherStatusId": 2, "name": "issued" },
                      "product":
                        {
-                          "productId": 263,
-                          "productName": "HTM-80002",
-                          "productDescription": "10 euro korting op je gehele winkelmand.",
+                          "productId": 264,
+                          "productName": "Kortingsvoucher HTM 20% Korting ",
+                          "productDescription": "Voucher waarmee het product \"HTM 20% Korting\" voor een lagere prijs kan worden aangeschaft.",
+                          "amountInclTax": 100,
+                          "requiredProducts":
+                            [
+                              {
+                                "productId": 984,
+                                "productName": "HTM 20% Korting",
+                                "productDescription": "Reis met 20% korting op je betaalpas bij HTM.",
                                "productCategory": 
                                  {
-                              "productCategoryId": 9,
-                              "isTravelProduct": false,
-                              "name": "Voucher",
+                                    "productCategoryId": 1,
+                                    "isTravelProduct": true,
+                                    "name": "Kortingsabonnement",
                                  },
-                          "amountInclTax": -1000,
-                          "requiredProducts": [],
+                                "amountInclTax": 500,
                                "_links":
                                  {
                                    "get_details":
                                      {
-                                  "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/products/263",
+                                        "href": "https://api.integratielaag.nl/abt/touchpoint/1.0/products/984",
                                        "method": "GET",
                                      },
                                  },
                              },
-                      "mandatoryCustomerDataItems": [],
+                            ]
+                        },
+                      "mandatoryCustomerDataItems": []
+                    }
+                Voucher that grants a discount for a whole order:
+                  summary: Voucher that grants a discount for a whole order
+                  description: |-
+                    Voucher that grants a discount for a whole order. In this case, no requiredProduct is specified, and 
+                    the voucher has an amountInclTax < 0. The (negative) amountInclTax dictates the value of the voucher, 
+                    that is subtracted from the total order value as a discount (with a minimum order total of 0).
+                  value:
+                    {
+                      "issuedVoucherId": "d4e5f6a7-b8c9-0d1e-2f3a-4b5c6d7e8f90",
+                      "voucherCode": "HTM-A7J-128-PYT",
+                      "fromInclusive": "2024-10-04T00:00:00.000",
+                      "untilInclusive": "2024-11-04T00:00:00.000",
+                      "voucherStatus": { "voucherStatusId": 2, "name": "issued" },
+                      "product":
+                        {
+                          "productId": 265,
+                          "productName": "Voucher 10 euro korting",
+                          "productDescription": "Voucher die 10 euro korting geeft op je gehele winkelmand.",
+                          "amountInclTax": -1000,
+                          "requiredProducts": []
+                        },
+                      "mandatoryCustomerDataItems": []
                    }
        "403":
          description: Forbidden
@ -137,20 +171,20 @@ paths:
                      "detail": "You do not have permission to access this resource.",
                      "instance": "/issuedvouchers",
                    }
-        "404":
-          description: Not found
+        "400":
+          description: Bad request
          content:
            application/problem+json:
              schema:
                $ref: "#/components/schemas/rfc9457"
              examples:
-                Voucher not found:
-                  summary: Voucher not found
+                Invalid voucher code:
+                  summary: Invalid voucher code
                  value:
                    {
-                      "type": "https://example.com/probs/not-found",
-                      "title": "Voucher not found",
-                      "detail": "The voucher with code VOUCHER123 does not exist.",
+                      "type": "https://example.com/probs/bad-request",
+                      "title": "Invalid voucher code",
+                      "detail": "No valid voucher found for code VOUCHER123.",
                      "instance": "/issuedvouchers",
                    }
        "500":
@ -176,6 +210,166 @@ components:
      scheme: bearer
      bearerFormat: JWT
  schemas:
+    salesTouchpointIssuedVoucherResponse:
+      type: object
+      required:
+        - issuedVoucherId
+        - voucherCode
+        - fromInclusive
+        - untilInclusive
+        - voucherStatus
+        - product
+        - mandatoryCustomerDataItems
+      properties:
+        issuedVoucherId:
+          type: string
+          description: The unique (technical) identifier of the issued voucher instance.
+          example: "d4e5f6a7-b8c9-0d1e-2f3a-4b5c6d7e8f90"
+        voucherCode:
+          type: string
+          description: The voucher code that is shared with the customer and uniquely identifies this voucher.
+          example: "HTM-A7J-128-PYT"
+        fromInclusive:
+          type: string
+          format: date-time-offset
+          description: |-
+           The date and time the voucher becomes valid for redemption. This has nothing to do with 
+           the allowed start date of a requiredProduct (for this, the existing order flow logic is applied).
+          example: "2024-10-04T00:00:00.000+02:00"
+        untilInclusive:
+          type: string
+          format: date-time-offset
+          description: |-
+           The date and time the voucher becomes invalid for redemption. This has nothing to do with 
+           the maximum allowed start date of a requiredProduct (for this, the existing order flow logic is applied).
+          example: "2024-11-04T00:00:00.000+01:00"
+        voucherStatus:
+          type: object
+          required:
+            - voucherStatusId
+            - name
+          description: |-
+           The current status of the voucher. Can be any of the following:
+            - 1 = new
+            - 2 = issued
+            - 3 = redeemed
+            - 4 = revoked
+            - 5 = expired
+            - 6 = pendingRedemption
+          properties:
+            voucherStatusId:
+              type: integer
+              example: 2
+            name:
+              type: string
+              example: "issued"
+        product:
+          type: object
+          description: The "product" referencing the voucher definition that this voucher instance is based on
+          required:
+            - productId
+            - productName
+            - productDescription
+            - amountInclTax
+          properties:
+            productId:
+              type: integer
+              example: 263
+            productName:
+              type: string
+              example: Voucher Ooievaarspas-product AOW
+            productDescription:
+              type: string
+              example: |-
+               Voucher voor AOW-ers in Den Haag met een Ooievaarspas, die ingewisseld kan worden 
+               voor het product "Ooievaarspas voor AOW-ers in Den Haag".
+            amountInclTax:
+              type: integer
+              description: |- 
+               When combined with a requiredProduct, the (positive or zero) amountInclTax dictates 
+               the (modified) total amount that needs to be paid for said product. When the requiredProduct 
+               has a sellingPrice > 0, the difference between sellingPrice and voucher amountInclTax
+               represents the granted discount.
+               When not combined with a required product, the (negative) amountInclTax dictates
+               the value of the voucher, that is subtracted from the total order value as a discount 
+               (with a minimum order total of 0).
+              example: 0
+            requiredProducts:
+              type: array
+              description: |-
+               Currently, only one requiredProduct is supported and thus, this array can contain at 
+               most one element.
+              items:
+                type: object
+                required:
+                  - productId                 
+                properties:
+                  productId:
+                    type: integer
+                    example: 892
+                  productName:
+                    type: string
+                    example: "Ooievaarspas voor AOW-ers in Den Haag"
+                  productDescription:
+                    type: string
+                    example: "Vrij reizen bij HTM voor Haagse AOW-gerechtigden met een Ooievaarspas."
+                  productCategory:
+                    type: object
+                    required: 
+                      - productCategoryId
+                      - isTravelProduct
+                      - name
+                    properties:
+                      productCategoryId:
+                        type: integer
+                        example: 2
+                      isTravelProduct:
+                        type: boolean
+                        example: true
+                      name:
+                        type: string
+                        example: "Afgekocht reisrecht"
+                  amountInclTax:
+                    type: integer
+                    description: |-
+                      Selling price of the product in cents (including tax, if applicable) that is 
+                      currently active for the calling touchpoint. When 0, the product is free of charge.
+                    example: 0
+                  imageReference:
+                    type: string
+                    description: Can be a URL or a base64 encoded image
+                    example: https://www.htm.nl/nog-onbekende-productafbeelding
+                  _links:
+                    type: object
+                    properties:
+                      get_details:
+                        type: object
+                        description: Link to get more details for the product that this voucher instance applies to
+                        properties:
+                          href:
+                            type: string
+                            example: https://api.integratielaag.nl/abt/touchpoint/1.0/products/982
+                          method:
+                            type: string
+                            example: GET
+        mandatoryCustomerDataItems:
+          type: array
+          description: |-
+           List of mandatory customer data items that are required to redeem this voucher.\
+           The values provided for these data items may be checked against allowed values as provided by the voucher issuer.
+          items: 
+            type: object
+            required:
+              - mandatoryCustomerDataItemId
+              - customerDataItem
+            properties:
+              mandatoryCustomerDataItemId:
+                type: integer
+                example: 8
+              customerDataItem:
+                type: string
+                example: padBirthdate
+
    unavailable:
      type: object
    rfc9457:
--- a/src/openapi/products/SE-vouchers-supplier.yaml
+++ b/src/openapi/products/SE-vouchers-supplier.yaml
--- a/src/openapi/products/productreference-crud.yaml
+++ b/src/openapi/products/productreference-crud.yaml
@ -1553,6 +1553,9 @@ components:
        - productCategoryId: 8
          name: Saldo
          isTravelProduct: true
+        - productCategoryId: 9
+          name: Voucher
+          isTravelProduct: false
      type: array
      items:
        $ref: '#/components/schemas/productCategoryGetEntity'    
@ -1811,7 +1814,7 @@ components:
        - mandatoryCustomerDataItemId: 5
          customerDataItem: address
        - mandatoryCustomerDataItemId: 6
-          customerDataItem: phone
+          customerDataItem: voucher
        - mandatoryCustomerDataItemId: 7
          customerDataItem: ovPayToken
        - mandatoryCustomerDataItemId: 8
--- a/src/openapi/products/products-crud.yaml
+++ b/src/openapi/products/products-crud.yaml
@ -46,6 +46,13 @@ paths:
            when false, return only non-archived products (isArchived = false).
          schema:
            type: boolean
+        - name: onlyVouchers
+          in: query
+          required: false
+          description: |-
+            When omitted, defaults to false (i.e. return all normal products that are NOT voucher definitions); when true, return only voucher definitions
+          schema:
+            type: boolean
      responses:
        '200':
          description: OK
@ -387,6 +394,7 @@ paths:
                    "fikoArticleNumber": "1234",
                    "isValid": true,
                    "isArchived": false,
+                    "needsVoucher": false,
                    "gboPackageTemplateId": "30901",
                    "productName": "HTM pilot 90% korting",
                    "productDescription": "Reis met 90% korting gedurende de eerste F&F pilot!",
@ -474,6 +482,7 @@ paths:
                    "fikoArticleNumber": "1234",
                    "isValid": true,
                    "isArchived": false,
+                    "needsVoucher": false,
                    "gboPackageTemplateId": "30901",
                    "productName": "HTM pilot 90% korting",
                    "productDescription": "Reis met 90% korting gedurende de eerste F&F pilot!",
@ -560,6 +569,7 @@ paths:
                    "fikoArticleNumber": "1234",
                    "isValid": true,
                    "isArchived": false,
+                    "needsVoucher": false,
                    "gboPackageTemplateId": "30901",
                    "productName": "HTM pilot 90% korting",
                    "productDescription": "Reis met 90% korting gedurende de eerste F&F pilot!",
@ -680,6 +690,7 @@ paths:
                    "fikoArticleNumber": "1234",
                    "isValid": true,
                    "isArchived": false,
+                    "needsVoucher": false,
                    "gboPackageTemplateId": "33610",
                    "productName": "HTM Regio Vrij DH73",
                    "productDescription": "Voor een vast bedrag onbeperkt reizen met EBS, HTM en RET in het gekozen gebied in de regio Rotterdam Den Haag.",
@ -866,6 +877,7 @@ paths:
                      "fikoArticleNumber": "1234",
                      "isValid": true,
                      "isArchived": false,
+                      "needsVoucher": false,
                      "gboPackageTemplateId": "30901",
                      "tapConnectProductCode": null,
                      "productName": "HTM pilot 90% korting",
@ -1028,6 +1040,7 @@ paths:
                      "fikoArticleNumber": "1234",
                      "isValid": true,
                      "isArchived": false,
+                      "needsVoucher": false,
                      "gboPackageTemplateId": "30901",
                      "tapConnectProductCode": null,
                      "productName": "HTM pilot 90% korting",
@ -1270,6 +1283,7 @@ paths:
                      "fikoArticleNumber": "1234",
                      "isValid": true,
                      "isArchived": false,
+                      "needsVoucher": false,
                      "gboPackageTemplateId": "33610",
                      "tapConnectProductCode": null,
                      "productName": "HTM Regio Vrij DH73",
@ -1475,6 +1489,7 @@ paths:
                      "fikoArticleNumber": "1234",
                      "isValid": true,
                      "isArchived": false,
+                      "needsVoucher": false,
                      "gboPackageTemplateId": null,
                      "tapConnectProductCode": null,
                      "productName": "IBAN wijzigen functioneel product",
@ -1672,6 +1687,7 @@ paths:
                      "fikoArticleNumber": "1234",
                      "isValid": true,
                      "isArchived": false,
+                      "needsVoucher": false,
                      "gboPackageTemplateId": null,
                      "tapConnectProductCode": null,
                      "productName": "OV-pas saldo (1 eurocent)",
@ -2775,6 +2791,10 @@ components:
          type: boolean
          description: Indicates if the product is archived - if true, the Service Engine will prevent touchpoints from seeing this product
          example: false
+        needsVoucher:
+          type: boolean
+          description: Indicates if the product needs a voucher (with this productId as requiredProductId) to be bought - if false, this is optional, but still allowed
+          example: false
        gboPackageTemplateId:
          type: string
          example: '30901'
@ -3132,6 +3152,10 @@ components:
          type: boolean
          description: Indicates if the product is archived - if true, the Service Engine will prevent touchpoints from seeing this product
          example: false
+        needsVoucher:
+          type: boolean
+          description: Indicates if the product needs a voucher (with this productId as requiredProductId) to be bought - if false, this is optional, but still allowed
+          example: false
        gboPackageTemplateId:
          type: string
          description: >-
@ -3503,6 +3527,10 @@ components:
          type: boolean
          description: Indicates if the product is archived - if true, the Service Engine will prevent touchpoints from seeing this product
          example: false
+        needsVoucher:
+          type: boolean
+          description: Indicates if the product needs a voucher (with this productId as requiredProductId) to be bought - if false, this is optional, but still allowed
+          example: false
        gboPackageTemplateId:
          type: string
          description: >-
--- a/src/openapi/products/purchased_products-crud.yaml
+++ b/src/openapi/products/purchased_products-crud.yaml
@ -209,6 +209,12 @@ paths:
                                {
                                  "issuedVoucherId": "e1f2g3h4-i5j6-k7l8-m9n0-o1p2q3r4s5t6",
                                  "voucherCode": "VOUCHER12345",
+                                  "touchPointId": 23,
+                                  "metadata1": null,
+                                  "metadata2": null,
+                                  "metadata3": null,
+                                  "metadata4": null,
+                                  "metadata5": null,
                                  "voucherStatusInstances":
                                    [
                                      {
@ -219,6 +225,7 @@ paths:
                                            "name": "New",
                                          },
                                        "createdOn": "2024-10-04T12:34:56.000",
+                                        "reason": null,
                                      },
                                      {
                                        "voucherStatusInstanceId": "b01412e6-70fb-4c05-9bef-e65bf2747ca1",
@ -228,6 +235,7 @@ paths:
                                            "name": "Issued",
                                          },
                                        "createdOn": "2024-10-04T12:37:14.000",
+                                        "reason": "test reason"
                                      },
                                    ],
                                  "voucherClaims":
@ -248,6 +256,155 @@ paths:
                        ],
                      "href": null,
                    }
+    post:
+      tags:
+        - Purchased Product
+      summary: Create a new purchased product.
+      description: Create a new purchased product. Only one single instance of `purchasedGboProducts`, `purchasedTapconnectTickets` or `issuedVouchers` can be specified at once.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/unavailable"
+            examples:
+              Create Purchased GBO Product:
+                value:
+                  {
+                    "productId": 11,
+                    "createdOn": "2024-10-04T12:34:56.000",
+                    "lastUpdatedOn": "2024-10-04T12:34:56.000",
+                    "purchasedProductResources":
+                      [
+                        {
+                          "resourceNameId": 1,
+                          "resourceIdentifier": "408eefa9-b393-4bb3-8439-b2e51833abc7",
+                        },
+                        {
+                          "resourceNameId": 2,
+                          "resourceIdentifier": "f809a6e1-1c8d-4f8e-8a6e-0d0b1e1e1e1e",
+                        },
+                      ],
+                    "purchasedGboProducts":
+                      [
+                        {
+                          "salesTimestamp": "2024-10-04T12:34:56.000",
+                          "refundTimestamp": "2024-10-04T12:34:56.000",
+                          "fromInclusive": "2024-10-04T12:34:56.000",
+                          "untilInclusive": "2024-10-04T12:34:56.000",
+                          "packageTemplateId": "30003",
+                          "xBot": "f15efe6f-7353-4968-b134-60ba6fc2da8b",
+                          "xTat": "42efebf7-132e-4ee0-9cbb-4037a9a54ad8",
+                          "xSpit": "d67b2f72-918a-4e6c-957d-a39ed9c9e16b",
+                          "customerTokenId": "b6492322-c458-4857-9ac3-a109c1887b9f",
+                          "ovPayTokenId": 13,
+                          "createdOn": "2024-10-04T12:34:56.000",
+                          "lastUpdatedOn": "2024-10-04T12:34:56.000",
+                          "createdBy": "someuser",
+                          "lastUpdatedBy": null
+                        },
+                      ],
+                    "purchasedTapconnectTickets": [],
+                    "issuedVouchers": [],
+                  }
+              Create Purchased TapConnect Ticket:
+                value:
+                  {
+                    "productId": 11,
+                    "createdOn": "2024-10-04T12:34:56.000",
+                    "lastUpdatedOn": "2024-10-04T12:34:56.000",
+                    "purchasedProductResources":
+                      [
+                        {
+                          "resourceNameId": 1,
+                          "resourceIdentifier": "408eefa9-b393-4bb3-8439-b2e51833abc7",
+                        },
+                        {
+                          "resourceNameId": 2,
+                          "resourceIdentifier": "f809a6e1-1c8d-4f8e-8a6e-0d0b1e1e1e1e",
+                        },
+                      ],
+                    "purchasedGboProducts": [],
+                    "purchasedTapconnectTickets":
+                      [
+                        {
+                          "issuedAt": "2024-10-04T12:34:56.000",
+                          "activatedAt": "2024-10-04T12:34:56.000",
+                          "cancelledAt": "2024-10-04T12:34:56.000",
+                          "ticketReference": "KJj43nejhbTxhr897287",
+                          "createdOn": "2024-10-04T12:34:56.000",
+                          "lastUpdatedOn": "2024-10-04T12:34:56.000",
+                          "createdBy": "John Doe",
+                          "lastUpdatedBy": "John Doe",
+                          "externalDeviceId": "c5545584-04af-4c60-a955-d6a70baab848",
+                          "serviceId": "HTM-1234-7654-8945",
+                          "activateBefore": "2024-10-08",
+                          "validityStart": "2024-10-05T12:34:56.000",
+                          "validityEnd": "2024-10-06T12:34:56.000"
+                        },
+                      ],
+                    "issuedVouchers": [],
+                  }
+              Create Issued Voucher:
+                value:
+                  {
+                    "productId": 11,
+                    "createdOn": "2024-10-04T12:34:56.000",
+                    "lastUpdatedOn": "2024-10-04T12:34:56.000",
+                    "purchasedProductResources":
+                      [
+                        {
+                          "resourceNameId": 1,
+                          "resourceIdentifier": "408eefa9-b393-4bb3-8439-b2e51833abc7",
+                        },
+                        {
+                          "resourceNameId": 2,
+                          "resourceIdentifier": "f809a6e1-1c8d-4f8e-8a6e-0d0b1e1e1e1e",
+                        },
+                      ],
+                    "purchasedGboProducts": [],
+                    "purchasedTapconnectTickets": [],
+                    "issuedVouchers":
+                      [
+                        {
+                          "voucherCode": "VOUCHER123",
+                          "touchPointId": 23,
+                          "metadata1": null,
+                          "metadata2": null,
+                          "metadata3": null,
+                          "metadata4": null,
+                          "metadata5": null,
+                          "voucherStatusInstances": [
+                            {
+                              "voucherStatusId": 1,
+                              "createdOn": "2024-10-04T12:34:56.000",
+                              "reason": "test reason"
+                            }
+                          ],
+                          "voucherClaims": [
+                            {
+                              "mandatoryCustomerDataItemId": 8,
+                              "value": "1999-12-31"
+                            },
+                            {
+                              "mandatoryCustomerDataItemId": 4,
+                              "value": "john.doe@example.com"
+                            }
+                          ],
+                          "fromInclusive": "2024-10-04T12:34:56.000",
+                          "untilInclusive": "2025-10-04T12:34:56.000"
+                        },
+                      ],
+                  }
+      responses:
+        "201":
+          description: Created
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/unavailable"
+              example:
+                { "purchasedProductId": "a9b3dea5-fb8a-4b1e-9fe6-90cad31c0cfd" }
  /purchasedproducts/{purchasedProductId}:
    parameters:
      - in: path
@ -382,6 +539,12 @@ paths:
                          {
                            "issuedVoucherId": "e1f2g3h4-i5j6-k7l8-m9n0-o1p2q3r4s5t6",
                            "voucherCode": "VOUCHER12345",
+                            "touchPointId": 23,
+                            "metadata1": null,
+                            "metadata2": null,
+                            "metadata3": null,
+                            "metadata4": null,
+                            "metadata5": null,
                            "voucherStatusInstances":
                              [
                                {
@ -389,12 +552,14 @@ paths:
                                  "voucherStatus":
                                    { "voucherStatusId": 1, "name": "New" },
                                  "createdOn": "2024-10-04T12:34:56.000",
+                                  "reason": null,
                                },
                                {
                                  "voucherStatusInstanceId": "b01412e6-70fb-4c05-9bef-e65bf2747ca1",
                                  "voucherStatus":
                                    { "voucherStatusId": 2, "name": "Issued" },
                                  "createdOn": "2024-10-04T12:37:14.000",
+                                  "reason": "test reason"
                                },
                              ],
                            "voucherClaims":
@ -1054,11 +1219,18 @@ paths:
            example:
              {
                "voucherCode": "VOUCHER123",
+                "touchPointId": 23,
+                "metadata1": null,
+                "metadata2": null,
+                "metadata3": null,
+                "metadata4": null,
+                "metadata5": null,
                "voucherStatusInstances":
                  [
                    {
                      "voucherStatusId": 1,
                      "createdOn": "2024-10-04T12:34:56.000",
+                      "reason": "test reason"
                    },
                  ],
                "voucherClaims":
@ -1066,7 +1238,7 @@ paths:
                    { "mandatoryCustomerDataItemId": 8, "value": "1999-12-31" },
                    {
                      "mandatoryCustomerDataItemId": 4,
-                      "value": "vlad.harkonnen@househarkonnen.net",
+                      "value": "john.doe@example.com",
                    },
                  ],
                "fromInclusive": "2024-10-04T12:34:56.000",
@ -1102,6 +1274,20 @@ paths:
            format: uuid
            example: 058a1af7-897f-45d5-b691-9cc9161e387f
          description: The id of the purchased product.
+        - in: query
+          name: statusChangedAfter          
+          required: false
+          description: Return only issued vouchers that have had their status changed after the given date and time.
+          schema:
+            type: string
+            format: date-time-offset
+            example: "2024-10-04T00:00:00.000Z"
+        - in: query
+          name: productId
+          schema:
+            type: integer
+            example: 1
+          description: The id of the product and the issuedVouchers related to it
        - in: query
          name: voucherCode
          schema:
@ -1117,6 +1303,14 @@ paths:
          explode: false
          required: false
          description: The moest recent status id of the voucher.
+        - in: query
+          name: orderBy
+          schema:
+            type: string
+            enum: [PurchasedProductCreatedOn, PurchasedProductLastUpdatedOn]
+          explode: false
+          required: false
+          description: The ordering of the issuedVouchers in the list
      responses:
        "200":
          description: OK
@ -1132,6 +1326,13 @@ paths:
                        "issuedVoucherId": "d4e5f6a7-b8c9-0d1e-2f3a-4b5c6d7e8f90",
                        "purchasedProductId": "058a1af7-897f-45d5-b691-9cc9161e387f",
                        "voucherCode": "VOUCHER123",
+                        "productId": 888,
+                        "touchPointId": 23,
+                        "metadata1": null,
+                        "metadata2": null,
+                        "metadata3": null,
+                        "metadata4": null,
+                        "metadata5": null,
                        "voucherStatusInstances":
                          [
                            {
@ -1139,12 +1340,14 @@ paths:
                              "voucherStatus":
                                { "voucherStatusId": 1, "name": "New" },
                              "createdOn": "2024-10-04T12:34:56.000",
+                              "reason": null,
                            },
                            {
                              "voucherStatusInstanceId": "b01412e6-70fb-4c05-9bef-e65bf2747ca1",
                              "voucherStatus":
                                { "voucherStatusId": 2, "name": "Issued" },
                              "createdOn": "2024-10-04T12:37:14.000",
+                              "reason": "test reason",
                            },
                          ],
                        "voucherClaims":
@ -1163,7 +1366,7 @@ paths:
                                  "mandatoryCustomerDataItemId": 4,
                                  "customerDataItem": "emailAddress",
                                },
-                              "value": "vlad.harkonnen@househarkonnen.net",
+                              "value": "john.doe@example.com",
                            },
                          ],
                        "fromInclusive": "2024-10-04T12:34:56.000",
@ -1191,9 +1394,16 @@ paths:
        content:
          application/json:
            schema:
-              $ref: "#/components/schemas/unavailable"
-            example:
+              $ref: "#/components/schemas/PostIssuedVoucherStatusInstanceRequest"
+            examples:
+              newToIssued:
+                summary: Mark a voucher as issued
+                value:
                  { "voucherStatusId": 2, "createdOn": "2024-10-04T12:34:56.000" }
+              issuedToRevokedWithReason:
+                summary: Mark a voucher as revoked with reason
+                value:
+                  { "voucherStatusId": 4, "createdOn": "2024-10-04T12:34:56.000", "reason": "Voucher revoked because it was redeemed by an unauthorized user." }
      responses:
        "200":
          description: OK
@ -1227,6 +1437,7 @@ paths:
                      { "voucherStatusId": 3, "name": "Redeemed" },
                      { "voucherStatusId": 4, "name": "Revoked" },
                      { "voucherStatusId": 5, "name": "Expired" },
+                      { "voucherStatusId": 6, "name": "PendingRedemption" },
                    ],
                }
 components:
@ -1238,6 +1449,22 @@ components:
  schemas:
    unavailable:
      type: object
+    PostIssuedVoucherStatusInstanceRequest:
+      type: object
+      required:
+        - voucherStatusId
+        - createdOn
+      properties:
+        voucherStatusId:
+          type: integer
+          example: 4
+        createdOn:
+          type: string
+          format: date-time
+          example: 2024-10-04T12:34:56.000
+        reason:
+          type: string
+          example: "Voucher revoked because it was redeemed by an unauthorized user."
    PostPurchasedTapConnectTicketRequest:
      type: object
      required:
@ -1299,56 +1526,6 @@ components:
          format: date-time
          description: The date-time at which the ticket will become invalid for traveling. The ticket will not be valid after this date/time.
          example: 2024-10-06T12:34:56.000
-    BulkResponseBody:
-      type: object
-      properties:
-        startTime:
-          type: string
-          format: date-time
-          example: 2025-02-14T05:32:47.0672237Z
-        status:
-          type: string
-          example: Running
-        clientTrackingId:
-          type: string
-          example: 08584620957189579629541919368CU00
-        callbackurl:
-          type: string
-          format: uri
-          example: https://services.api.htm.nl/purchasedproducts/responsestatus/runtime/webhooks/workflow/scaleUnits/prod-00/workflows/6fd466916c
-        retryAfter:
-          type: integer
-          example: 10
-        summary:
-          $ref: "#/components/schemas/summaryBody"
-      required:
-        - startTime
-        - status
-        - clientTrackingId
-        - callbackurl
-        - retryAfter
-        - summary
-    summaryBody:
-      type: object
-      properties:
-        summary:
-          type: object
-          properties:
-            created:
-              type: integer
-              example: 15
-            updated:
-              type: integer
-              example: 2
-            total:
-              type: integer
-              example: 17
-          required:
-            - created
-            - total
-            - updated
-      required:
-        - summary
    rfc9457:
      type: object
      properties:
--- a/src/trip.json
+++ b/src/trip.json
--- a/trip2.json
+++ b/trip2.json
@ -0,0 +1,151 @@
+{  "tripId": 796727186,  "tripVersion": 1,  "tripStatus": "COMPLETE",  "organisationIcon": "/icons/organisations/3.svg",  "organisationId": "3",  "organisationName": "HTM",  "supersededByTripIds": [],  "supersedesTripIds": [],  "products": [    {
+      "productTemplateId": "30901",      "productCommercialName": {        "items": [          {
+            "key": "nl-NL",            "value": "HTM 90% Korting"           },
+          {
+            "key": "en-US",            "value": "HTM 90% Discount"           }
+        ]
+      },
+      "productIcon": "001.jpg",      "purchaseDateTime": "2026-04-02T12:38:28+02:00",      "organisationName": "ProductRetailer HTM",      "appliedValue": -125,      "organisationId": "3",      "category": "SALES",      "typesOfFareProduct": [        {
+          "privateCode": "discount"         }
+      ],
+      "xspit": "821ddb0d-4ea7-4a0d-84aa-bb7facce15d1"     },
+    {
+      "productTemplateId": "N/A",      "purchaseDateTime": "2025-07-09T12:39:27+02:00",      "appliedValue": 139,      "category": "SALES",      "typesOfFareProduct": [        {
+          "privateCode": "payg"         }
+      ],
+      "xspit": "7618337f-c986-4bef-990d-f5a6b47292b8"     },
+    {
+      "productTemplateId": "1:2000",      "productCommercialName": {        "items": [          {
+            "key": "nl-NL",            "value": "Basis Bus Tram Metro"           },
+          {
+            "key": "en-US",            "value": "BTM full fare"           }
+        ]
+      },
+      "validFrom": "2000-01-01T01:00:00+01:00",      "validUntil": "2100-01-01T00:59:59+01:00",      "weight": 116,      "appliedMetric": "FARE",      "appliedValue": 116,      "category": "INTERNAL",      "typesOfFareProduct": [        {
+          "privateCode": "payg"         }
+      ],
+      "xspit": "7618337f-c986-4bef-990d-f5a6b47292b8",      "xpit": "f4256df6-b767-460f-9880-f7597bd7f3f2"     },
+    {
+      "productTemplateId": "2:2000",      "productCommercialName": {        "items": [          {
+            "key": "nl-NL",            "value": "Basis Bus Tram Metro"           },
+          {
+            "key": "en-US",            "value": "BTM full fare"           }
+        ]
+      },
+      "validFrom": "2000-01-01T01:00:00+01:00",      "validUntil": "2100-01-01T00:59:59+01:00",      "weight": 23,      "appliedMetric": "FARE",      "appliedValue": 23,      "category": "INTERNAL",      "typesOfFareProduct": [        {
+          "privateCode": "payg"         }
+      ],
+      "xspit": "7618337f-c986-4bef-990d-f5a6b47292b8",      "xpit": "f4256df6-b767-460f-9880-f7597bd7f3f2"     },
+    {
+      "productTemplateId": "3:30901",      "productCommercialName": {        "items": [          {
+            "key": "nl-NL",            "value": "HTM 90% Korting"           },
+          {
+            "key": "en-US",            "value": "HTM 90% Discount"           },
+          {
+            "key": "nl-NL",            "value": "Reis je regelmatig met HTM? Activeer dan HTM 90% Korting op je betaalpas of credit card en reis een week lang met korting!"           },
+          {
+            "key": "en-US",            "value": "Are you a regular traveler? Activate HTM 90% discount on your EMV card!"           }
+        ]
+      },
+      "validFrom": "2026-04-03T04:00:00+02:00",      "validUntil": "2031-04-03T04:00:00+02:00",      "organisationName": "Product Owner HTM",      "weight": -125,      "appliedMetric": "DISCOUNT",      "appliedValue": -125,      "organisationId": "3",      "category": "INTERNAL",      "typesOfFareProduct": [        {
+          "privateCode": "discount"         }
+      ],
+      "productCatalogVersionId": "PC-HTM:70",      "xspit": "821ddb0d-4ea7-4a0d-84aa-bb7facce15d1",      "xpit": "1848597c-5ba9-4dab-8d9f-3948948706a1"     }
+  ],
+  "checkinTransactionTimestamp": "2026-04-20T16:59:48+02:00",  "checkoutTransactionTimestamp": "2026-04-20T17:04:50+02:00",  "checkinTransactionReference": "00310F92;29023;emvClt",  "checkoutTransactionReference": "0030DBC1;30528;emvClt",  "checkinLocation": {    "stopId": 2721,    "stopName": {      "items": [        {
+          "key": "nl-NL",          "value": "Station Hollands Spoor"         },
+        {
+          "key": "en-US",          "value": "Station Hollands Spoor"         }
+      ]
+    },
+    "stopDesc": "Stop point2721",    "stopUrl": "/icons/stops/stop.svg",    "locationType": 0   },
+  "checkoutLocation": {    "stopId": 2862,    "stopName": {      "items": [        {
+          "key": "nl-NL",          "value": "Kalvermarkt-Stadhuis"         },
+        {
+          "key": "en-US",          "value": "Kalvermarkt-Stadhuis"         }
+      ]
+    },
+    "stopDesc": "Stop point2862",    "stopUrl": "/icons/stops/stop.svg",    "locationType": 0   },
+  "tokenType": "EMV-CLT",  "transportType": "TRAM",  "lineId": "17",  "lineName": "Tram17",  "networkId": "1",  "networkName": "HTM netwerk",  "currency": "EUR",  "transportIcon": "/icons/transportTypes/tram.svg",  "legs": [    {
+      "legId": 1614950977,      "checkinTransactionTimestamp": "2026-04-20T16:59:48+02:00",      "checkoutTransactionTimestamp": "2026-04-20T17:04:50+02:00",      "checkinLocation": {        "stopId": 2721,        "stopName": {          "items": [            {
+              "key": "nl-NL",              "value": "Station Hollands Spoor"             },
+            {
+              "key": "en-US",              "value": "Station Hollands Spoor"             }
+          ]
+        },
+        "stopDesc": "Stop point2721",        "stopUrl": "/icons/stops/stop.svg",        "locationType": 0       },
+      "checkoutLocation": {        "stopId": 2862,        "stopName": {          "items": [            {
+              "key": "nl-NL",              "value": "Kalvermarkt-Stadhuis"             },
+            {
+              "key": "en-US",              "value": "Kalvermarkt-Stadhuis"             }
+          ]
+        },
+        "stopDesc": "Stop point2862",        "stopUrl": "/icons/stops/stop.svg",        "locationType": 0       },
+      "baseRate": 139,      "lineId": "17",      "lineName": "Tram17",      "networkId": "1",      "networkName": "HTM netwerk",      "fare": 14,      "fareState": "CALCULATED",      "currency": "EUR",      "products": [        {
+          "productTemplateId": "30901",          "productCommercialName": {            "items": [              {
+                "key": "nl-NL",                "value": "HTM 90% Korting"               },
+              {
+                "key": "en-US",                "value": "HTM 90% Discount"               }
+            ]
+          },
+          "productIcon": "001.jpg",          "purchaseDateTime": "2026-04-02T12:38:28+02:00",          "organisationName": "ProductRetailer HTM",          "appliedValue": -125,          "organisationId": "3",          "category": "SALES",          "typesOfFareProduct": [            {
+              "privateCode": "discount"             }
+          ],
+          "xspit": "821ddb0d-4ea7-4a0d-84aa-bb7facce15d1"         },
+        {
+          "productTemplateId": "N/A",          "purchaseDateTime": "2025-07-09T12:39:27+02:00",          "appliedValue": 139,          "category": "SALES",          "typesOfFareProduct": [            {
+              "privateCode": "payg"             }
+          ],
+          "xspit": "7618337f-c986-4bef-990d-f5a6b47292b8"         },
+        {
+          "productTemplateId": "1:2000",          "productCommercialName": {            "items": [              {
+                "key": "nl-NL",                "value": "Basis Bus Tram Metro"               },
+              {
+                "key": "en-US",                "value": "BTM full fare"               }
+            ]
+          },
+          "validFrom": "2000-01-01T01:00:00+01:00",          "validUntil": "2100-01-01T00:59:59+01:00",          "weight": 116,          "appliedMetric": "FARE",          "appliedValue": 116,          "category": "INTERNAL",          "typesOfFareProduct": [            {
+              "privateCode": "payg"             }
+          ],
+          "xspit": "7618337f-c986-4bef-990d-f5a6b47292b8",          "xpit": "f4256df6-b767-460f-9880-f7597bd7f3f2"         },
+        {
+          "productTemplateId": "2:2000",          "productCommercialName": {            "items": [              {
+                "key": "nl-NL",                "value": "Basis Bus Tram Metro"               },
+              {
+                "key": "en-US",                "value": "BTM full fare"               }
+            ]
+          },
+          "validFrom": "2000-01-01T01:00:00+01:00",          "validUntil": "2100-01-01T00:59:59+01:00",          "weight": 23,          "appliedMetric": "FARE",          "appliedValue": 23,          "category": "INTERNAL",          "typesOfFareProduct": [            {
+              "privateCode": "payg"             }
+          ],
+          "xspit": "7618337f-c986-4bef-990d-f5a6b47292b8",          "xpit": "f4256df6-b767-460f-9880-f7597bd7f3f2"         },
+        {
+          "productTemplateId": "3:30901",          "productCommercialName": {            "items": [              {
+                "key": "nl-NL",                "value": "HTM 90% Korting"               },
+              {
+                "key": "en-US",                "value": "HTM 90% Discount"               },
+              {
+                "key": "nl-NL",                "value": "Reis je regelmatig met HTM? Activeer dan HTM 90% Korting op je betaalpas of credit card en reis een week lang met korting!"               },
+              {
+                "key": "en-US",                "value": "Are you a regular traveler? Activate HTM 90% discount on your EMV card!"               }
+            ]
+          },
+          "validFrom": "2026-04-03T04:00:00+02:00",          "validUntil": "2031-04-03T04:00:00+02:00",          "organisationName": "Product Owner HTM",          "weight": -125,          "appliedMetric": "DISCOUNT",          "appliedValue": -125,          "organisationId": "3",          "category": "INTERNAL",          "typesOfFareProduct": [            {
+              "privateCode": "discount"             }
+          ],
+          "discountPercentage": 90,          "productCatalogVersionId": "PC-HTM:70",          "xspit": "821ddb0d-4ea7-4a0d-84aa-bb7facce15d1",          "xpit": "1848597c-5ba9-4dab-8d9f-3948948706a1"         }
+      ],
+      "appliedTimePeriods": [],      "tariffJourneyStart": true,      "topoDistance": 1161,      "concessionId": "1",      "appliedZones": []    }
+  ],
+  "lastUpdatedTripDateTime": "2026-04-20T17:04:50+02:00",  "fare": 14,  "loyaltyOrDiscount": true,  "supportCode": "pWM8Km6J8aHg5n",  "tripVersionReason": "STRUCTURE",  "checkinTransactionId": "00310F92-29023-emvClt-1776697188000",  "checkoutTransactionId": "0030DBC1-30528-emvClt-1776697490000",  "tariffVersionId": "HTM-CF1:278",  "correlationId": "4bc7a040-71bf-4084-a61e-b2dd72092079",  "createdAt": "2026-04-20T17:05:01.473+02:00",  "entryTariffLocation": {    "stopId": 2721,    "stopName": {      "items": [        {
+          "key": "nl-NL",          "value": "Station Hollands Spoor"         },
+        {
+          "key": "en-US",          "value": "Station Hollands Spoor"         }
+      ]
+    },
+    "stopDesc": "Stop point2721",    "stopUrl": "/icons/stops/stop.svg",    "locationType": 0   },
+  "traveledLines": [    {
+      "lineId": "17",      "lineName": "Tram17"     }
+  ],
+  "tripFareNature": "FIXED",  "paymentMethodId": "229a01ff-7bd9-4740-9b19-00637146a6ca",  "paymentMethodMode": "PREPAID",  "paymentMethodName": "EPURSE",  "paymentProviderName": "TPURSE",  "paymentProviderBusinessEntityId": "600027",  "registryFragmentVersionId": "REG:27",  "vehicleId": 5063,  "xbot": "c85e34d6-f9c1-49c2-8574-59b37e0f3b8e" }
+
Author	SHA1	Message	Date
Mirjam Herald	b6a490c979	added AGO status to order response	2026-09-09 10:55:14 +02:00
Max Martens	1ac734de96	Add productId in issuedvoucher response (nb: its not added in purchasedproducts response as this was not implemented and not needed)	2026-09-09 09:33:11 +02:00
Max Martens	c692cd45ea	Make voucherStatus response model consistent across array + object; add time offset everywhere	2026-08-31 12:57:13 +02:00
Max Martens	0f2eaed9dd	Fixed touchPointId casing; added SE query param "includeStatusHistory", remove text explaining mandatory query params for SE issuedvoucher, add explanation for automatic touchpointId filtering	2026-08-27 16:15:29 +02:00
Mirjam Herald	11ea8f5fea	typo	2026-08-24 11:54:47 +02:00
Mirjam Herald	e52fde1bb3	added delete endpoint to token vault API's	2026-08-21 13:08:50 +02:00
Mirjam Herald	1761c662e7	Merge pull request 'features/OVPAY2475-Token-API' (#67 ) from features/OVPAY2475-Token-API into develop Reviewed-on: #67	2026-08-21 11:02:29 +00:00
Max Martens	6a0e5a5fba	Added metadata in VoucherSupplier GET/POST, re-added POST purchasedproduct CRUD	2026-08-14 08:55:40 +02:00
Max Martens	7953e035bb	Add touchpointId/metadata1tm5/statusChangedAfter in CRUD and TP spec POST purchasedProduct is missing in CRUD? Try to find it later (and add new changes to request body there as well)	2026-08-13 17:13:52 +02:00
Max Martens	3c4ca6e00c	Fix ordervouchers delete URI	2026-08-10 16:56:00 +02:00
Max Martens	f87baaca06	Add voucherstatus reason in POST and GET	2026-08-10 15:04:31 +02:00
Mirjam Herald	257f8f939b	added query param for orderVoucher	2026-08-10 14:32:01 +02:00
Mirjam Herald	c1bb52277e	Merge pull request 'features/OVPAY2790-journalentryFiko' (#65 ) from features/OVPAY2790-journalentryFiko into develop Reviewed-on: #65	2026-08-10 12:10:50 +00:00
Mirjam Herald	e79ac51966	Merge pull request 'features/OVPAY2475-AGO' (#66 ) from features/OVPAY2475-AGO into develop Reviewed-on: #66	2026-08-10 12:09:05 +00:00
Mirjam Herald	c6b395a05b	fix xtat -> xTat	2026-08-10 14:06:51 +02:00
Mirjam Herald	1d4fbf5004	Links in se endpoints for TAT	2026-08-10 14:06:51 +02:00
Max Martens	8eed2a9dd6	Fix null paymentMomentId	2026-08-10 14:06:51 +02:00
Max Martens	5e255b7bac	Added contractVersions in SE contracts list response, fixed some example formatting	2026-08-10 14:06:51 +02:00
Max Martens	e2f70a78af	Updated SE-vouchers-supplier spec after review	2026-08-10 14:06:51 +02:00
Max Martens	ee0147b963	Fix JSON schema errors	2026-08-10 14:06:50 +02:00
Mirjam Herald	0a8a706675	removed not available endpoint	2026-07-31 14:25:32 +02:00
Mirjam Herald	d42236dafc	meervoud	2026-07-31 10:07:00 +02:00
Mirjam Herald	1aae9729b2	meervoud	2026-07-31 10:05:36 +02:00
Mirjam Herald	f7975ed5a1	updates to processingFailure and transactionAuditTrail POST calls and GETS, consistency	2026-07-31 09:48:25 +02:00
Mirjam Herald	f0c216be9b	added FK to other tables	2026-07-30 15:58:35 +02:00
Mirjam Herald	3db0d113a0	fixed example	2026-07-30 15:44:01 +02:00
Mirjam Herald	f4e7bd9385	added new API's	2026-07-30 12:01:30 +02:00
Mirjam Herald	c2a6b1c9c2	fixed description response	2026-07-29 09:14:09 +02:00
Max Martens	17f52cd914	Fix null paymentMomentId	2026-07-28 20:58:22 +02:00
Herald	a493694021	rebased changes	2026-07-28 15:38:12 +02:00
Herald	96fd6341b0	removed required for xTat in response	2026-07-28 14:35:10 +02:00
Herald	f1022c0d8d	added href links	2026-07-28 14:29:14 +02:00
Herald	5b3264d9cd	added authorize endpoint and get securitystatus endpoint	2026-07-28 14:15:18 +02:00
Max Martens	3d387e451b	Added contractVersions in SE contracts list response, fixed some example formatting	2026-07-15 14:37:20 +02:00
Max Martens	851f60d665	Updated SE-vouchers-supplier spec after review	2026-07-14 17:31:52 +02:00
Max Martens	0987cedb4f	Fix JSON schema errors	2026-07-14 15:50:57 +02:00
Herald	23dd83fac9	added schema for the post Order endpoint	2026-07-10 13:28:02 +02:00
Herald	a637cfb4f2	Removed voucher query param on the CRUD's en updated SE-order POST/ PATCH orderline in regards to vouchers	2026-07-09 17:50:14 +02:00
Herald	42ff41baea	fixed indentation and added customerProfileId in POST body	2026-06-25 10:54:24 +02:00
Herald	699c633a4e	changed name to securityTokens	2026-06-24 14:07:21 +02:00
Herald	95bc19d7ff	semantics	2026-06-24 12:08:29 +02:00
Herald	8e77863480	simplified endpoint	2026-06-24 11:40:19 +02:00
Herald	07e1dc91e3	added security to the container specs	2026-06-24 11:30:18 +02:00
Herald	75531b4fdc	fixed indentation	2026-06-24 11:12:19 +02:00
Herald	00a98a6178	things	2026-06-24 11:07:34 +02:00
Herald	937a0323ed	added endpoints for the token vault	2026-06-23 14:47:22 +02:00
Herald	ebee1178ef	added container endpoint for creating token in vault	2026-06-23 14:32:51 +02:00
Herald	6e37b7c4fe	removed unused tags	2026-06-23 14:08:07 +02:00
Herald	a0ebde6ae2	Added swagger for container notifications	2026-06-23 13:47:00 +02:00
Mirjam Herald	1f8e8f1381	Merge pull request 'feature/OVPAY-2485' (#63 ) from feature/OVPAY-2485 into develop Reviewed-on: #63	2026-06-22 14:45:48 +00:00
b.boterman@htm.nl	1f0481119c	OVPAY-2485 - Typo in url.	2026-06-18 16:04:41 +02:00
b.boterman@htm.nl	3d2885f2b8	OVPAY-2485 - Added support for anonymous TAT security.	2026-06-18 14:43:08 +02:00
b.boterman@htm.nl	280d3b1fcd	OVPAY-2485 - Extended token details response bodies with security.	2026-06-18 11:58:34 +02:00
b.boterman@htm.nl	f28a797b6b	OVPAY-2485 - Improved TP requests.	2026-06-18 11:17:04 +02:00
b.boterman@htm.nl	87d8f7df58	OVPAY-2485 - Updated OTP response body for TP.	2026-06-18 10:25:06 +02:00
b.boterman@htm.nl	30e8860a39	OVPAY-2485 - Added schemas.	2026-06-17 16:26:39 +02:00
b.boterman@htm.nl	d18afcae8c	OVPAY-2485 - Minor additions.	2026-06-17 16:23:11 +02:00
b.boterman@htm.nl	eb03aa04e6	OVPAY-2485 - Added SE endpoint for AGO OTP verification.	2026-06-17 16:22:38 +02:00
b.boterman@htm.nl	aca160f65c	OVPAY-2485 - Added SE endpoint for AGO activation.	2026-06-17 16:08:06 +02:00
Mirjam Herald	3f090c76b6	Merge pull request 'added additional Query params for issuedVoucher CRUD' (#62 ) from OVPAY2738-adjustment-CRUD-PP into develop Reviewed-on: #62	2026-06-16 10:38:31 +00:00
Herald	25788e0976	added additional Query params for issuedVoucher CRUD	2026-06-16 12:01:37 +02:00
Max Martens	90bb7c11b5	Change mandatoryItem 6 (phone) to voucher	2026-06-11 12:19:15 +02:00
Max Martens	0c23571085	Remove whitespace	2026-06-11 12:12:11 +02:00
Max Martens	f1a0850871	Now also for TP/SE endpoints	2026-06-11 12:11:05 +02:00
Max Martens	cc8881b9d5	Add onlyVouchers queryParam and needsVoucher product attribute	2026-06-11 12:06:47 +02:00
Max Martens	d484acbc69	Add required attributes that should always be present in every (valid) voucher definition	2026-06-11 11:14:10 +02:00
Max Martens	e5a0b52d1b	Merge pull request 'Updated OpenAPI spec for voucher supplier, with examples more relevant to the first usecase (ooievaarspas AOW) - this YAML is also shared with PASS devs' (#60 ) from feature/OVPAY-2545-vouchers into develop Reviewed-on: #60	2026-06-08 08:45:46 +00:00
Max Martens	89833680db	Merge branch 'develop' into feature/OVPAY-2545-vouchers	2026-06-08 08:44:17 +00:00
Max Martens	ff225ea00c	Merge branch 'feature/OVPAY-2545-vouchers' of https://git.integratielaag.nl/HTM/ovpay into feature/OVPAY-2545-vouchers	2026-06-03 19:06:25 +02:00
Max Martens	bd870d0fa8	Added JSON schema and updated examples and error specs for supplier - tweaked OAS for TP	2026-06-03 19:06:17 +02:00
Max Martens	531eaa2ff6	Update src/openapi/products/SE-vouchers-TP.yaml Fix some typos Signed-off-by: Max Martens <m.martens@htm.nl>	2026-06-02 15:21:03 +00:00
Max Martens	7173bd3727	Finished JSON schema and all 3 relevant examples for TP vouchers OpenAPI spec (will also update vouchers supplier OpenAPI spec soon)	2026-06-01 11:17:22 +02:00
Max Martens	a09ad1ad08	Process PR feedback, first version of issuedVoucher JSON schema	2026-06-01 10:40:28 +02:00
Max Martens	f198c1633b	Default false for isEmailVerified	2026-05-19 17:29:40 +02:00
Max Martens	5f7893b057	Merge pull request 'Reverted some links to the old/"standard" href structure, becasuse the links are buggy and not worth the effort to fix. Exception is GET /devices, that one is working' (#61 ) from feature/DHIL-5732-links into develop Reviewed-on: #61	2026-05-12 14:56:25 +00:00
Max Martens	383d43122b	Reverted some links to the old/"standard" href structure, becasuse the links are buggy and not worth the effort to fix. Exception is GET /devices, that one is working	2026-05-12 16:29:51 +02:00
Max Martens	f8010560cc	Tweak query param	2026-05-07 09:52:29 +02:00
Max Martens	69908f58b0	Finished updating, will be shared with pass devs in this state - I tweaked some stuff, needs to be discussed if this is final desired spec, but good enough to give pass devs a general idea	2026-05-06 22:44:55 +02:00
Max Martens	9fb20a491f	WIP update spec with examples for Ooievaarspas-AOW (still need to finish POST/PATCH)	2026-05-06 08:28:21 +02:00
Max Martens	2fca37628e	Only return deviceId in PATCH response to prevent extra internal GET call in PATCH logic	2026-05-05 15:12:20 +02:00